[OpenAFS] how to install Kerberos AFS Principal??
TIARA System Man
Tue, 7 Apr 2009 14:01:49 +0800
i only had afs@REALM. should i create another afs/cell@REALM?
if i do following commands, will it mess up afs server?
ktadd -e des-cbc-crc:normal -k /etc/krb5.keytab.afs afs/tiara.sinica.edu.tw
asetkey add X /etc/krb5.keytab.afs afs/tiara.sinica.edu.tw
what are the benefits to have afs/cell@REALM? please tell me. thank you. :)
On Tue, Apr 7, 2009 at 1:40 PM, Brandon S. Allbery KF8NH
> On 2009 Apr 6, at 23:12, TIARA System Man wrote:
>> on the april fools' day, i installed another afs file server. it was
>> disaster i made some thing wrong. i added another kerberos afs
> Don't do that. =C2=A0There should be a single AFS principal across an ent=
> (you could have two (afs@REALM and afs/cell@REALM) as long as they have
> different kvnos, but that is advanced usage) installed on all servers.
> =C2=A0Easiest is probably to simply copy the KeyFile from the first serve=
r to any
> additional servers you add.
> brandon s. allbery [solaris,freebsd,perl,pugs,haskell] email@example.com
> system administrator [openafs,heimdal,too many hats] firstname.lastname@example.org
> electrical and computer engineering, carnegie mellon university =C2=A0 =
Institute of Astronomy and Astrophysics
Tel: +886-2-3365-2200 ext 742