[OpenAFS] how to install Kerberos AFS Principal??

TIARA System Man sysman@tiara.sinica.edu.tw
Tue, 7 Apr 2009 11:12:52 +0800


dear all,

on the april fools' day, i installed another afs file server. it was
disaster i made some thing wrong. i added another kerberos afs
principal. every user can not access their data. even root can not
read any data from afs. finally, i restored from backup kerberos. now,
it works okay. but, i'm still wondering what is the correct way to
install kerberos afs principal?

following are my steps to install the kerberos afs principal.

# ktutil
ktutil: =C2=A0rkt afs.keytab
ktutil: =C2=A0list
slot KVNO Principal
---- ---- -----------------------------------------------------------------=
----
=C2=A0 1 =C2=A0 =C2=A03 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0afs@TIARA.SINICA.EDU.TW
ktutil: =C2=A0wkt /etc/krb5.keytab
ktutil: =C2=A0exit

# asetkey add 3 /etc/krb5.keytab afs

so, am i correct? should i use the same afs.keytab to all afs file
server? please teach me. thank you.

best, sam

--=20
Sam Tseng
Academia Sinica
Institute of Astronomy and Astrophysics
Tel: +886-2-3365-2200 ext 742
Fax: +886-2-2367-7849