[OpenAFS] pts: security object was passed a bad ticket

Derek Atkins warlord@MIT.EDU
17 Jan 2003 18:08:42 -0500

Thomas Grieder <openafs@gmx.net> writes:

> On Friday 17 January 2003 21:45, Derek Atkins wrote:
> > Hi,
> >
> > What version of Kerberos are you using?
> 5 MIT

That doesn't help.  WHAT VERSION?? 1.2.what?

> > What key-types do you have for your AFS key?

> Key: vno 3, DES cbc mode with CRC-32, no salt
> Attributes:
> Policy: [none]

Ok, this is good.

> > Are you sure your entry in the KDC matches your entry in the KeyFile?
> How can I find it out?

Well, you could use asetkey to like the KeyFile and at least verify the kvno.

> > Perhaps you need to fix your krb524d as per the Kerberos Readme?
> ?

If you are using MIT Kerberos >= 1.2.6, read the Kerberos Documentation
that explain how to turn off "new-style afs keys" in krb524d.

> Thomas


       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available