[OpenAFS] asetkey: failed to set key, code 70354694

Derrick J Brashear shadow@dementia.org
Mon, 9 Apr 2007 15:04:00 -0400 (EDT)


On Mon, 9 Apr 2007, Russ Allbery wrote:

> Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
>
>> I think you've got it backwards.  You can only use one Kerberos realm
>> per AFS cell (well, I guess maybe you could use two ... I don't know if
>> you can simultaneously have a realm with the same name as your cell and
>> the single "alternate" you are allowed).  Maybe you're thinking of
>> multiple AFS cells served out of one Kerberos realm ... but that's one
>> entry per keyfile.
>
> In 1.5, you can use as many Kerberos realms as you want.  It's extremely
> useful when you want to have multiple local realms that are already
> synchronized and should be treated as local rather than as cross-realm
> realms.

--- src/config/afs_sysnames.h   9 Feb 2007 01:14:38 -0000       1.50.2.27
+++ src/config/afs_sysnames.h   5 Apr 2007 18:56:40 -0000
@@ -285,4 +285,6 @@
  #ifdef AFS_KERBREALM_ENV
  #define        AFS_REALM_SZ            64
  #endif
+/* Specifies the number of equivalent local realm names */
+#define AFS_NUM_LREALMS         4

Well, only if you recompile