[OpenAFS] Re: OpenAFS Problems running batch jobs
Christopher D. Clausen
cclausen@acm.org
Fri, 2 Jun 2006 14:13:50 -0500
That is just the klist output. What about the output of "tokens" ?
And you might need to unlog and aklog to ensure that your tokens are
refreshed.
<<CDC
Brady Catherman <bradyc@uidaho.edu> wrote:
> No go.. everything is just like before except that I removed all the
> users/acl's containing /batch and added .batch instead.
>
> bcatherm still works and bcatherm.batch fails.
>
> Any other ideas? thanks for all the advice guys! =)
>
>
> thecube home # fs listacl bcatherm
> Access list for bcatherm is
> Normal rights:
> system:administrators rlidwka
> bcatherm rlidwk
> bcatherm.batch rlidwk
>
> bcatherm@thecube /mnt/home $ klist
> Ticket cache: FILE:/tmp/krb5cc_1217_M0MJzv
> Default principal: bcatherm.batch@IBEST.UIDAHO.EDU
>
> Valid starting Expires Service principal
> 06/02/06 12:03:00 06/02/06 22:03:00 krbtgt/
> IBEST.UIDAHO.EDU@IBEST.UIDAHO.EDU
> 06/02/06 12:03:01 06/02/06 22:03:00 afs@IBEST.UIDAHO.EDU
>
> bcatherm@thecube /afs/ibest.uidaho.edu/home $ cd bcatherm/
> -bash: cd: bcatherm/: Permission denied
>
>
>
>
>
>
> On Jun 2, 2006, at 10:58 AM, Christopher D. Clausen wrote:
>
>> You need to pts create user.batch instead of user/batch. And then
>> add user.batch to ACLs. This is a hold over from Kerberos 4.
>>
>> Please try it out. If it works, reply back to the list.
>>
>> <<CDC
>>
>> Brady Catherman <bradyc@uidaho.edu> wrote:
>>> Alright, so I have gotten to the point where I am ready to start
>>> playing with batch processing. I am taking the suggestion that Derek
>>> Atkins made. I have two principles for each user, username and
>>> username/batch. The batch account has a keytab file that can be used
>>> to generate tickets. I can log in and everything appears to be
>>> working until I try to use the batch account with OpenAFS. As my
>>> normal user I can use my home directory normally, but as the batch
>>> user I can not cd into the directory even though I should have
>>> permissions..
>>>
>>> I am sure I am just mis understanding something with this setup but
>>> for the life of me I can not figure out what. Any help would be
>>> greatly appreciated!
>>>
>>>
>>> Here is the output from all the programs that I can run =)
>>>
>>> thecube home # fs listacl bcatherm
>>> Access list for bcatherm is
>>> Normal rights:
>>> system:administrators rlidwka
>>> bcatherm rlidwk
>>> bcatherm/batch rlidwk
>>>
>>> bcatherm@thecube /afs/ibest.uidaho.edu/home $ klist
>>> Ticket cache: FILE:/tmp/krb5cc_1217_M0MJzv
>>> Default principal: bcatherm/batch@IBEST.UIDAHO.EDU
>>>
>>> Valid starting Expires Service principal
>>> 06/02/06 10:37:09 06/02/06 20:37:09 krbtgt/
>>> IBEST.UIDAHO.EDU@IBEST.UIDAHO.EDU
>>> 06/02/06 10:37:14 06/02/06 20:37:09 afs@IBEST.UIDAHO.EDU
>>>
>>> bcatherm@thecube /afs/ibest.uidaho.edu/home $ tokens
>>>
>>> Tokens held by the Cache Manager:
>>>
>>> Tokens for afs@ibest.uidaho.edu [Expires Jun 2 20:37]
>>>
>>>
>>> bcatherm@thecube /afs/ibest.uidaho.edu/home $ cd bcatherm
>>> -bash: cd: bcatherm: Permission denied
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> OpenAFS-info mailing list
>>> OpenAFS-info@openafs.org
>>> https://lists.openafs.org/mailman/listinfo/openafs-info