[OpenAFS] OpenAFS, NAT, IPtables
Fri, 28 Sep 2007 23:29:08 -0400
I got rid of this one: "Unable to authenticate to AFS because
Authentication Server was unavailable."
That appeared to be a firewall issue.
I do see the timeout happening, every so many minutes, did anyone solve
that port. (The head node of that clusters runs IPtables/NAT so that all
the nodes can use AFS as a "common file system" for running MPICH apps)
The authentication server was running. Other clients don't have any
issues at all. (it was a masquerading issue on the head node of that
(PS: "not too many" AFS guru's here.. that's why I am on the list)
Jason Edgecombe wrote:
> Ron Croonenberg wrote:
>> Hello all,
>> I hope I am not beating a dead horse here (I saw some references, but
>> not a solution).
>> I have a few machines in a cluster, and installed openafs on the nodes,
>> the client is running (I can see the mountpoints in /afs) But when I try
>> to get a token with klog it says
>> Unable to authenticate to AFS because Authentication Server was unavailable.
>> any ideas ? is that the timeout issue people were talking about ?
>> (is there a solution ?)
> It sounds like your cell isn't running the legacy authentication server
> (kaserver). This is the recommended way. If you have set up kerberos 5,
> then run "kinit; aklog"
> Have you spoken to your local AFS gurus about how to set things up?
> FYI, the OpenAFS client work fine behind NAT with the server on the
> public internet. That's what I use from home.
> OpenAFS-info mailing list
Ron Croonenberg |
| Phone: 1 765 658 4761
Lab Instructor & | Fax: 1 765 658 4732
Technology Coordinator |
Department of Computer Science | e-mail: ronc@DePauw.edu
DePauw University |
275 Julian Science & Math Center |
602 South College Ave. |
Greencastle, IN 46135 |