[OpenAFS] Last very few steps: hints please!

[Sensei]

Hi. I'm back to terrorize you with my questions :)

In my dept, we've done this:

- Kerberos 5 authentication (MIT)
- LDAP for information retreiving (over kerberos/gssapi) like home
   directories, preferred shell, office number, email... (OpenLDAP)

Now, I was setting up a cell *against* kerberos. This is what I've done:

On kadmin:

addprinc -randkey afs
addprinc -randkey afs/host.name

ktadd -e des-cbc-crc:v4 afs
ktadd -e des-cbc-crc:v4 afs/host.name

=== OK (Look at the KVNOs)

asetkey add <KVNO> /etc/krb5.keytab afs/host.name
asetkey add <KVNO> /etc/krb5.keytab afs

=== OK

asetkey list
kvno   <KVNO>: key is <HEX_NUMBER>
kvno   <KVNO>: key is <HEX_NUMBER>
All done.

=== OK

./bosserver -noauth &
[1] 1360
[1]+ Done      ./bosserver -noauth

=== OK

./bos setcellname host.name plm.cell

=== OK

./bos create -server host.name -instance ptserver -type simple -cmd 
/usr/afs/bin/ptserver -cell plm.cell

=== OK

./bos create -server host.name -instance vlserver -type simple -cmd 
/usr/afs/bin/vlserver -cell plm.cell

=== OK

./bos addhost -server host.name -host host.name -cell plm.cell -noauth

=== OK

bos adduser -server host.name admin -cell plm.cell -noauth

=== OK

./bos listhosts host.name -noauth
Cell name is plm.cell
     Host 1 is host.name

=== OK

./bos listkeys servername -cell plm.cell -noauth
key <KVNO> has cksum <HEX_NUMBER>
key <KVNO> has cksum <HEX_NUMBER>
Key last chaged on Wed Mar <THE DATE AND TIME>
All done.

=== OK

./pts createuser -name admin -cell plm.cell -noauth
User admin has id 1

=== OK

./pts adduser admin system:administrators -cell plm.cell -noauth

=== OK

./pts membership admin -cell plm.cell -noauth
Groups admin (id: 1) is a member of:
    system:administrators

=== OK

./bos restart host.name -all -cell plm.cell -noauth

=== OK

./bos create -server host.name -instance fs -type fs -cmd 
/usr/afs/bin/fileserver -cmd /usr/afs/bin/volserver -cmd 
/usr/afs/bin/salvager -cell plm.cell -noauth

 >>> REMOVED vlserver from -cmd sequence

=== OK

./bos status host.name fs -long -noauth

=== OK

./vos create -server host.name -partition /vicepa -name root.afs -cell 
plm.cell -noauth
Volume 274141546154 created on partition /vicepa of host.name

=== OK

./bos shutdown host.name -wait
bos: a pioctl failed (getting tickets)
bos: running unauthenticated
File server restart/shutdown received at Thu Mar 18 14:55:43 2004
File server has terminated normally at Thu Mar 18 14:55:43 2004

=== OK

pkill bosserver

=== OK

Edited afs.conf in order to start afs server

=== OK

Reboot.

Now, what should I do? I'd like to login from the shell (using pam) and 
get my ticket along with my token...

I have to setup a client, right? I'm using debian woody (stable) and I 
have no pam_krb5afs module. I should download it right? There's no way 
to remain in woody?

-- 
Sensei <senseiwa:tin.it> <icq:241572242> <msn:Sensei_Sen:hotmail.com>

f u cn rd ths u r usng unx