[OpenAFS] Token discarding
JR Boyens
jboyens@iastate.edu
Tue, 12 Nov 2002 10:41:53 -0600
It seems as though, number 1 may be happening...
I had:
default_principal_flags = +preauth
which I changed to:
default_principal_flags = -preauth
Is this correct, or will this result in krb5 losing preauth?
--
JR Boyens
jboyens@iastate.edu
On Tue, Nov 12, 2002 at 08:28:42AM -0500 or thereabouts, Ken Hornstein wrote:
> >I've followed the instructions in your guide and I seem to be stuck
> >again. I hate to ask for help again, but I have RTFM'd and I did
> >attempt this alone, but alas, to no avail.
>
> Two possibilities come to mind:
>
> 1) You've got a new MIT Kerberos (1.2.6 or greater) and your krb524d is
> issuing V5 service tickets; see krb524/README on how to disable this.
>
> 2) You need to make sure that the new KeyFile is distributed EVERYWHERE
> (all DB and fileservers)
>
> --Ken
>