Sat, 25 Feb 2006 12:07:18 -0800
Aklog works fine for both a SUSE and XP laptop.
Thru 2 firewalls, one at each end.
Run tcpdump and see if you're getting responses back.
From: email@example.com =
On Behalf Of Jeffrey Altman
Sent: Saturday, February 25, 2006 11:54 AM
To: Lars Schimmer
Subject: Re: [OpenAFS] aklog-madness
The error code means the KDC (or krb524d) cannot be reached.
Perhaps you have a firewall problem.
The OpenAFS for Windows aklog does not use krb524d unless you
specifically request it. My guess is that you want to use the
OpenAFS 1.4.0 aklog and the version you are using is not the
Lars Schimmer wrote:
> I need some help, again.
> Situation: In my net at work I can obtain tokens via aklog with no
> problem. Aklog is version 1.3 from debian package out of debian sarge,
> OpenAFS is 1.4.0.
> Outside of the my net (in the wide wide world) I've got my private PC
> with win XP and OpenAFS 1.4.0 and krb5 -3.0, and with debian sarge.
> With windows I can obtain tickets/tokens with no problem with my =
> With debian it wasn't possible. I assumed it was because of old aklog
> 1.3 version.
> But a friend of mine built some source package for me with
> openafs-krb5-1.4.1, aka aklog 1.4.1. But even this aklog doesn't =
> any tokens for me.
> The krb5.conf is the same as on the PC in the net, where old aklog 1.3
> is working.
> ./aklog -d -noprdb
> Authenticating to cell cgv.tugraz.at (server phobos.cgv.tugraz.at).
> We've deduced that we need to authenticate to realm CGV.TUGRAZ.AT.
> Getting tickets: afs/cgv.tugraz.at@CGV.TUGRAZ.AT
> Principal not found, trying alternate service name: afs/@CGV.TUGRAZ.AT
> Kerberos error code returned by get_cred: -1765328228
> aklog: Couldn't get cgv.tugraz.at AFS tickets:
> aklog: Cannot contact any KDC for requested realm while getting AFS
> TU Graz, Institut f=FCr ComputerGraphik & WissensVisualisierung
> Tel.: +43 316 873-5405 E-Mail: firstname.lastname@example.org
> PGP-Key-ID: 0xB87A0E03
OpenAFS-info mailing list