[OpenAFS] Token discarding

JR Boyens jboyens@iastate.edu
Tue, 12 Nov 2002 10:41:53 -0600


It seems as though, number 1 may be happening... 

I had:

	default_principal_flags = +preauth
which I changed to:
	default_principal_flags = -preauth

Is this correct, or will this result in krb5 losing preauth?

--
JR Boyens
jboyens@iastate.edu

On Tue, Nov 12, 2002 at 08:28:42AM -0500 or thereabouts, Ken Hornstein wrote:
> >I've followed the instructions in your guide and I seem to be stuck
> >again. I hate to ask for help again, but I have RTFM'd and I did
> >attempt this alone, but alas, to no avail.
> 
> Two possibilities come to mind:
> 
> 1) You've got a new MIT Kerberos (1.2.6 or greater) and your krb524d is
>    issuing V5 service tickets; see krb524/README on how to disable this.
> 
> 2) You need to make sure that the new KeyFile is distributed EVERYWHERE
>    (all DB and fileservers)
> 
> --Ken
>