[OpenAFS] openAFS 1.4.4 - ticket contained unknown key version number
Derrick Brashear
shadow@gmail.com
Fri, 26 Oct 2007 12:17:57 -0400
------=_Part_6274_13411893.1193415477935
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
all aklog working tells you is that there's a key for afs/(cell) in your
krb5 database.
doesn't tell you a thing about whether it matches what your servers know
about.
On 10/26/07, Hamish <hamish@travellingkiwi.com> wrote:
>
>
> I've got openAFS 1.4.4 (RPM x86_64 downloaded from openafs.org) running on
> RHES4 with kerberosV. Kerberos is installed & seems to be working OK. I
> can
> get a krb ticket with krb5 no problems. kadmin etc all work. I can create
> new
> principals (e.g. afs).
>
> aklog works. It get a token and then tokens shows the token successfully
> generated... Working so far.
>
> However when I try to execute a command that requires a token (e..g box
> restart, vos create etc), I get
>
> bos: failed to restart instance fs (ticket contained unknown key version
> number)
>
> I'm assumign thats ince aklog is in the RPM's that we're all OK for
> working
> with krb5. The fact that aklog works seems to confirm that.
>
> Why the heck do I get an unknown key version when trying to do anything?
> I've
> googled till I'm blue in the face and have only found some really really
> old
> emails asking questions with no answers... The Wiki seems devoid of any
> info
> unless it's using kaserver when it comes to krb at all...
>
>
> Anyone?
>
> TIA
> Hamish.
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
------=_Part_6274_13411893.1193415477935
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
all aklog working tells you is that there's a key for afs/(cell) in your krb5 database.<br><br>doesn't tell you a thing about whether it matches what your servers know about.<br><br><br><div><span class="gmail_quote">
On 10/26/07, <b class="gmail_sendername">Hamish</b> <<a href="mailto:hamish@travellingkiwi.com">hamish@travellingkiwi.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<br>I've got openAFS 1.4.4 (RPM x86_64 downloaded from <a href="http://openafs.org">openafs.org</a>) running on<br>RHES4 with kerberosV. Kerberos is installed & seems to be working OK. I can<br>get a krb ticket with krb5 no problems. kadmin etc all work. I can create new
<br>principals (e.g. afs).<br><br>aklog works. It get a token and then tokens shows the token successfully<br>generated... Working so far.<br><br>However when I try to execute a command that requires a token (e..g box<br>
restart, vos create etc), I get<br><br>bos: failed to restart instance fs (ticket contained unknown key version<br>number)<br><br>I'm assumign thats ince aklog is in the RPM's that we're all OK for working<br>
with krb5. The fact that aklog works seems to confirm that.<br><br>Why the heck do I get an unknown key version when trying to do anything? I've<br>googled till I'm blue in the face and have only found some really really old
<br>emails asking questions with no answers... The Wiki seems devoid of any info<br>unless it's using kaserver when it comes to krb at all...<br><br><br>Anyone?<br><br>TIA<br> Hamish.<br>_______________________________________________
<br>OpenAFS-info mailing list<br><a href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a><br><a href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info
</a><br></blockquote></div><br>
------=_Part_6274_13411893.1193415477935--