[OpenAFS] Problms with Kerberos 5 & AFS and tokens, permissions

Lars Schimmer schimmer@cg.cs.tu-bs.de
Tue, 15 Mar 2005 16:27:34 +0100


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi!

I'm good on the way to migrate to krb5 fom builtin akserv.

Right now I setup a kerberos 5 server, I setup the key into the OpenAFS keyfile
and I setup some principals.
So I log in into the kerberos server, type kinit and than I aklog and get my token.
(yes, kerberos and akserv database are NOT the same, I setup new principals with
the same name on the kerberos database).
So I tried with the root user of my cell and my own personal user.
I got tokens (yeah, tokens with the ID of our AFS Cell root user and my own
private user on the cell), ok, not at once, but I tried more than once.
But while trying to access my private home dir, I got a access denied. As if
OpenAFS didn't access this token.
Ok, these are my first steps with kerberos 5 and I'm willing to learn, but why
does OpenAFS not accept my valid tokens? I assumed with a valid token I can
access the OpenAFS tree...
Any hints?

Thx,
Lars Schimmer
- --
- -----------------------------------------------------------------
Technische Universität Braunschweig, Institut für Computergraphik
Tel.: +49 531 391-2109            E-Mail: schimmer@cg.cs.tu-bs.de
PGP-Key-ID: 0xB87A0E03


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCNv7mVguzrLh6DgMRAvoSAKDMiPuEOzo5wGWI0HFdM4ki0Fo0bACfZyop
VPib8G0NWcNw1upeDIPkZm0=
=RrYH
-----END PGP SIGNATURE-----