[OpenAFS] Cross Realm Kerberos+AFS

[Douglas E. Engert]

Derek Harkness wrote:
> 
> Authenticating to cell foo.bar.com (server nietzsche.foo.bar.com).
> We've deduced that we need to authenticate to realm FOO.BAR.COM.
> Getting tickets: afs/foo.bar.com@FOO.BAR.COM
> Kerberos error code returned by get_cred: -1765328372
> aklog: Couldn't get umd.umich.edu AFS tickets:

Is the cell really foo.bar.com or is it umd.umich.edu as
indicted in the above message?

Are you sure you translated your FOOs and BARs correctly for the list?

What's in the syslogs on the KDCs? 

> 
> aklog: KDC policy rejects request while getting AFS tickets
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 

 Douglas E. Engert  <DEEngert@anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444