[OpenAFS] Re: Screwy keys? OpenAFS pts (and other) problems with MIT KDC

Jeff Blaine jblaine@kickflop.net
Fri, 19 May 2006 12:17:12 -0400


 > What's the kvno of the afs ticket you actually got from
 > the kdc? Is it also 5?
 >
 > (kvno afs/jbtest@JBTEST should tell you)

Nope.  However, it is now, and I get the same problem :(

bash-2.05# kvno afs/jbtest@JBTEST
afs/jbtest@JBTEST: kvno = 0
bash-2.05# kadmin.local
kadmin.local:  modprinc -kvno 5 afs/jbtest
Principal "afs/jbtest@JBTEST" modified.
bash-2.05# kdestroy
bash-2.05# unlog
bash-2.05# kinit admin
Password for admin@JBTEST:
bash-2.05# aklog
bash-2.05# kvno afs/jbtest@JBTEST
afs/jbtest@JBTEST: kvno = 5
bash-2.05# pts members system:administrators
pts: security object was passed a bad ticket so couldn't look up names
bash-2.05# ls /afs/.jbtest
afs: Tokens for user of AFS id 1 for cell jbtest are discarded (rxkad 
error=19270407)
bash-2.05#

(and yes, it is an empty directory anyway, but...)