[OpenAFS] aklog -setpag doesn't get a token

Simon Wilkinson sxw@inf.ed.ac.uk
Thu, 22 Mar 2007 19:00:29 +0000


On 22 Mar 2007, at 18:40, Douglas E. Engert wrote:

>
> aklog has a -d option. It is very helpful.

Not, unfortunately, in this case.

I can reproduce this - it does look as if aklog -setpag is managing  
to put the parent into a new PAG, but then failing to put the  
credentials correctly into that PAG. One thing that lead me astray  
for a while is that aklog does nothing if your token hasn't changed,  
even if it is called with the -setpag option. So, to reproduce you  
either need to have no credentials, or to have run kinit between the  
aklog, and then aklog -setpag

For me (2.6.20 kernel with keyring PAGs, OpenAFS 1.4.4) , the  
following is sufficient

kinit
aklog
tokens
kinit
aklog -setpag
tokens

The final tokens will show the contents of a new PAG, without any  
tokens.

Simon.