[OpenAFS] please help: Unable to authenticate

[Derrick J Brashear]

On Tue, 21 Jan 2003, Francisco Yumiceva wrote:

> Hi,
>
> I am still having problem to get a token from outside my campus.
>
> We have two servers on campus with RH6.2 and RH7.2 running openafs1.2.8.
> >From off campus, I get this error when I klog:
>
> klog -c hep.sc.edu
> Password:
> Unable to authenticate to AFS because Authentication Server was
> unavailable.
>
> The firewall campus has all the necessary services open for AFS. This is
> what I got with tcpdump from outside (cae.sc.rr.com):
>
> 17:04:19.426155 cae.sc.rr.com.32844 >
> bender.physics.sc.edu.afs3-kaserver:  rx ack cid f8a16ed8 call# 2 seq 0
> ser 9 secindex 0 serviceid 731 <client-init>,<req-ack> fir 1 0p (65)
> (DF) (ttl 64, id 0, len 93)

note that outside we never see any traffic coming back from the kaserver

> And this is on the server side:
> 17:43:53.206203 bender.physics.sc.edu.afs3-kaserver >
> cae88-121-007.sc.rr.com.32846:  rx data cid f8a9cf68 call# 1 seq 1 ser 1
> secindex 0 serviceid 731 <last-pckt> kauth reply authenticate-v2 (164)
> (DF) (ttl 64, id 0, len 192)

but this side is sending replies. it looks like a network problem to me.