[OpenAFS] Re: SuSe 9.0 &Heimdal.6

[ted creedon]

This is a multi-part message in MIME format.

------=_NextPart_000_0059_01C3CC5B.EA90E340
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

This AM I was getting ticket requests from nobody@TED-DOTIS.FAM, so =
kinit
admin;afslog -ctedcell; fixed that.

Bos listkeys shemya gives an error: "ticket returned unknown key version
number encountered while listing keys"

Looking at ethereal there is a:
 BOS server request (Bos-> afs3-bos port)
 Challenge		(afs3-bos -> bos port)
 Response		(Bos-> afs3-bos port)
 Abort		(afs3-bos -> bos port)

kdc.log is:

2003-12-27T09:09:20 AS-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for
krbtgt/TED-DORIS.FAM@TED-DORIS.FAM
2003-12-27T09:09:20 Using des-cbc-md5/des3-cbc-sha1
2003-12-27T09:09:20 sending 614 bytes to IPv4:10.1.1.116
2003-12-27T09:09:20 TGS-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for
afs/tedcell@TED-DORIS.FAM
2003-12-27T09:09:20 sending 532 bytes to IPv4:10.1.1.116
2003-12-27T09:09:20 524-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for
afs/tedcell@TED-DORIS.FAM
2003-12-27T09:09:20 sending 1266 bytes to IPv4:10.1.1.116
2003-12-27T09:09:29 524-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for
afs/tedcell@TED-DORIS.FAM
2003-12-27T09:09:29 sending 1266 bytes to IPv4:10.1.1.116
shemya:/var/log/openafs # kadmin -l
kadmin> list *
  afs@TED-DORIS.FAM
  root@TED-DORIS.FAM
  admin@TED-DORIS.FAM
  default@TED-DORIS.FAM
  afs/tedcell@TED-DORIS.FAM
  admin/admin@TED-DORIS.FAM
  kadmin/admin@TED-DORIS.FAM
  kadmin/hprop@TED-DORIS.FAM
  kadmin/changepw@TED-DORIS.FAM
  changepw/kerberos@TED-DORIS.FAM
  krbtgt/TED-DORIS.FAM@TED-DORIS.FAM
  host/shemya.ted-doris.fam@TED-DORIS.FAM

Could the problem be in the mapping of afs/tedcell@TED-DORIS.FAM in krb5 =
to
afs in AFS or the 1266 byte length returned?

Ted

-----Original Message-----
From: openafs-info-admin@openafs.org =
[mailto:openafs-info-admin@openafs.org]
On Behalf Of Derrick J Brashear
Sent: Friday, December 26, 2003 8:00 PM
To: openafs-info@openafs.org
Subject: RE: [OpenAFS] Re: SuSe 9.0 &Heimdal.6

On Fri, 26 Dec 2003, ted creedon wrote:

> I deleted key 2 in bos
>
> Bos listkeys shemya -noauth
> Examine afs
>
> Produce the same checksum for kvno 0

ok, that's what you want. you should be able to do the conversion. if it
doesn't work, i can make some guesses as to why, but you should try it
before i alarm you about things you might not need to deal with
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

------=_NextPart_000_0059_01C3CC5B.EA90E340
Content-Type: text/plain;
	name="startup.txt"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="startup.txt"

2003-12-27T09:09:20 AS-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for =
krbtgt/TED-DORIS.FAM@TED-DORIS.FAM=0A=
2003-12-27T09:09:20 Using des-cbc-md5/des3-cbc-sha1=0A=
2003-12-27T09:09:20 sending 614 bytes to IPv4:10.1.1.116=0A=
2003-12-27T09:09:20 TGS-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for =
afs/tedcell@TED-DORIS.FAM=0A=
2003-12-27T09:09:20 sending 532 bytes to IPv4:10.1.1.116=0A=
2003-12-27T09:09:20 524-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for =
afs/tedcell@TED-DORIS.FAM=0A=
2003-12-27T09:09:20 sending 1266 bytes to IPv4:10.1.1.116=0A=
2003-12-27T09:09:29 524-REQ admin@TED-DORIS.FAM from IPv4:10.1.1.116 for =
afs/tedcell@TED-DORIS.FAM=0A=
2003-12-27T09:09:29 sending 1266 bytes to IPv4:10.1.1.116=0A=
shemya:/var/log/openafs # kadmin -l=0A=
kadmin> list *=0A=
  afs@TED-DORIS.FAM=0A=
  root@TED-DORIS.FAM=0A=
  admin@TED-DORIS.FAM=0A=
  default@TED-DORIS.FAM=0A=
  afs/tedcell@TED-DORIS.FAM=0A=
  admin/admin@TED-DORIS.FAM=0A=
  kadmin/admin@TED-DORIS.FAM=0A=
  kadmin/hprop@TED-DORIS.FAM=0A=
  kadmin/changepw@TED-DORIS.FAM=0A=
  changepw/kerberos@TED-DORIS.FAM=0A=
  krbtgt/TED-DORIS.FAM@TED-DORIS.FAM=0A=
  host/shemya.ted-doris.fam@TED-DORIS.FAM=0A=

------=_NextPart_000_0059_01C3CC5B.EA90E340--