[OpenAFS] pts: security object was passed a bad ticket

[Derek Atkins]

Hi,

What version of Kerberos are you using?
What key-types do you have for your AFS key?
Are you sure your entry in the KDC matches your entry in the KeyFile?
Perhaps you need to fix your krb524d as per the Kerberos Readme?

-derek

Thomas Grieder <openafs@gmx.net> writes:

> Hi
> 
> I have problems to change access rights:
> 
> -*************************************************************************
> router:/afs/universum.space/user/thomas# fs setacl . thomas all
> fs: You don't have the required access rights on '.'
> 
> I logged in as admin who has "all" rights I thought...
> 
> -*************************************************************************
> router:/afs/universum.space/user/thomas# pt_util -m
> Ubik Version is: 1667178558.100663296
> office     2/0 -206 1 1
> system:backup 2/0 -205 -204 -204
> system:administrators 130/20 -204 -204 -204
>    admin    1
> system:ptsviewers 2/0 -203 -204 -204
> system:authuser 2/0 -102 -204 -204
> system:anyuser 2/0 -101 -204 -204
> 
> -***********************************************************************
> router:/afs/universum.space/user/thomas# tokens
> 
> Tokens held by the Cache Manager:
> 
> User's (AFS ID 1) tokens for afs@universum.space [Expires Jan 18 06:38]
>    --End of list--
> 
> -***********************************************************************
> Ticket cache: FILE:/tmp/krb5cc_0
> Default principal: admin@UNIVERSUM.SPACE
> 
> Valid starting     Expires            Service principal
> 01/17/03 20:38:50  01/18/03 06:38:43  krbtgt/UNIVERSUM.SPACE@UNIVERSUM.SPACE
> 01/17/03 20:39:10  01/18/03 06:38:43  afs@UNIVERSUM.SPACE
> 
> 
> Kerberos 4 ticket cache: /tmp/tkt0
> klist: You have no tickets cached
> 
> -***********************************************************************
> 
> kadmin.local:  listprincs
> K/M@UNIVERSUM.SPACE
> admin@UNIVERSUM.SPACE
> afs@UNIVERSUM.SPACE
> kadmin/admin@UNIVERSUM.SPACE
> kadmin/changepw@UNIVERSUM.SPACE
> kadmin/history@UNIVERSUM.SPACE
> krbtgt/UNIVERSUM.SPACE@UNIVERSUM.SPACE
> thomas.@UNIVERSUM.SPACE
> thomas@UNIVERSUM.SPACE
> 
> -*********************************************************************
> How can I solve this problem?
> Thanks for helping
> 
> Thomas
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available