[OpenAFS] KRB5 integration problems

Derek Atkins warlord@MIT.EDU
22 Sep 2002 16:59:51 -0400


Michael Nelson <mikenel@iapetus.com> writes:

> kadmin.local -e des-cbc-crc:afs3 -q "delprinc -force afs"
> kadmin.local -e des-cbc-crc:afs3 -q "delprinc -force admin"
> kadmin.local -e des-cbc-crc:afs3 -q "addprinc -e des-cbc-crc:afs3 afs"
> kadmin.local -e des-cbc-crc:afs3 -q "modprinc -kvno 0 afs"
> kadmin.local -e des-cbc-crc:afs3 -q "ktadd -k /etc/krb5.keytab -e 
> des-cbc-crc:afs3 afs"

What does "klist -ke" give you at this point?

> asetkey add 1 /etc/krb5.keytab afs
> kadmin.local -e des-cbc-crc:afs3 -q "ktremove -k /etc/krb5.keytab afs all"

Why do you do this?

> kadmin.local -e des-cbc-crc:afs3 -q "addprinc admin"
> 
> I am running AFS, krb524, and krb5kdc on a RedHat 7.2 box. I am using a
> self-compiled version of OpenAFS 1.2.6 along with the asetkey/aklog RPM
> from the openafs.org website. I also tried compiling the source 
> version of the latter, but it didn't make any difference.

What happens when you:
        kdestroy; kinit
        aklog -d
        klist

> Thanks,
> -mike

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available