[OpenAFS] Openafs 1.4.7, Active Directory 2003 user could not access AFS home directory

[Derrick Brashear]

On Wed, Oct 15, 2008 at 1:57 PM, Wenping Yang <yangw3@umdnj.edu> wrote:
>
> Derrick Brashear wrote:
>>
>> is MESH.UMDNJ.EDU in krb.conf on the AFS servers?
>>
>>
>
> No, MESH.UMDNJ.EDU is not on AFS servers. I saw a message talking about
>  adding "-realm" in AFS fileserver, but I am not sure how to make it work
> for two realms.

put it in /usr/afs/etc/krb.conf (or equivalent) on the fileservers, or
it's not going to work.

>
>> Also, can you kinit with the password you're using to ktutil add on
>> the linux machine when creating the keytab for the AD domain?
>>
>
> No, it did not work.
>
> [root@RArwjmsIST1 ~]# kinit afs/med.umdnj.edu@MESH.UMDNJ.EDU
> Password for afs/med.umdnj.edu@MESH.UMDNJ.EDU:
> kinit(v5): Preauthentication failed while getting initial credentials

ok, well, that error doesn't say the password is bad, so it's not
pertinent. (service principal presumably won't let you password
authenticate)



-- 
Derrick