[OpenAFS] ext_svrtab?

[ted creedon]

It helps to look at the krb5 logfiles, they tell you if you incorrect
principals.

Ken Hornstein's migration guide is the best howto noting that des-crc-cbc
should be des-crc-cbc:normal.

Using strace is helpful also.


tedc

-----Original Message-----
From: openafs-info-admin@openafs.org [mailto:openafs-info-admin@openafs.org]
On Behalf Of Pucky Loucks
Sent: Thursday, February 16, 2006 12:00 PM
To: openafs-info@openafs.org
Subject: Re: [OpenAFS] ext_svrtab?

Thanks Steve, I'll give that a try.

Pucky
On 16-Feb-06, at 12:23 PM, Steve Devine wrote:

> Pucky Loucks wrote:
>
>> Hi Brandon,
>>
>> how do I extract the service key from kadmin so that I can add it  
>> to  AFS?  The only documentation that I could find is so old, that  
>> I'm  kind of lost.
>>
>> http://www.cs.cmu.edu/afs/andrew.cmu.edu/usr/shadow/www/afs/afs- 
>> with- kerberos.html
>>
>> What I'm trying to do is replace kaserver with MIT Kerberos. Do  
>> you  know of more up to date info on this topic?  I also have the  
>> book  Managing AFS and all it has are 5 points on how to do it.
>>
>> 1)stop kaserver
>> 2) create principal called afs
>> 3) use ext_srvtab to extract the AFS service key
>> 4) use asetkey to install this extracted service into AFS's keyfile
>> 5) put the MIT kerberos REALM name into the afs configuration  
>> file / usr/afs/etc/krb.conf
>>
>> That's it, but I'm not having any luck with step 3.
>>
>> any help would be great.
>>
>> Pucky
>>
>>
>> On 16-Feb-06, at 11:59 AM, Brandon S. Allbery KF8NH wrote:
>>
>>>
>>> On Feb 16, 2006, at 2:56 , Pucky Loucks wrote:
>>>
>>>> I can't find this program anywhere, can someone point me in the   
>>>> right direction?  I'm implementing MIT Kerberos in my Cell and   
>>>> need to export the Key from MIT into AFS.
>>>
>>>
>>> It's not a program, it's a command within kadmin.
>>>
>>> -- 
>>> brandon s. allbery     [linux,solaris,freebsd,perl]        
>>> allbery@kf8nh.com
>>> system administrator  [openafs,heimdal,too many hats]    
>>> allbery@ece.cmu.edu
>>> electrical and computer engineering, carnegie mellon   
>>> university      KF8NH
>>>
>>>
>>>
>>
>> _______________________________________________
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
>
> I have some notes on what we did when we migrated here:
> http://msu.edu/service/afs/migrate/notes-onkdc-setup.pdf
> /sd
>
> -- 
> Steve Devine
> Storage Systems
> Academic Computing & Network Services
> Michigan State University
>
> 506 Computer Center
> East Lansing, MI 48824-1042
> 1-517-432-7327
>
> Baseball is ninety percent mental; the other half is physical.
> - Yogi Berra
>
>

_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info