[OpenAFS] Mit Krb5 and OpenAFS

[Derek Atkins]

Derrick J Brashear <shadow@dementia.org> writes:

> either
> -the AFS key in the kdc doesn't match the KeyFile
> -the server isn't configured for the cell the client is

Wait, you said you did a modprinc on the kvno after you did the
asetkey from the keytab?  That's your problem.  It means you kvno is
now out of sync between the kdc and the keyfile..

> probably the first. if you have the keytab you converted from, you might
> try kinit or whatever mit krb5 supports from the keytab

This would be a decent test to see if you are out of sync.  You may
need to run 'kadmin ktadd' to get a new keytab and then run asetkey
again to set the new key.

> -D

-derek
-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available