[OpenAFS] IP-address-based ACLs not working for a specific host

Jeff Blaine jblaine@kickflop.net
Fri, 09 Jan 2009 10:21:27 -0500


We use IP-address-based ACLs on one of our Solaris 9 clients
with no problems.

This Linux box we're trying to set up the same way is having
none of it.

The admin work:

ADMIN% pts creategroup silkhosts
group silkhosts has id -1594
ADMIN% pts adduser X.Y.11.70 silkhosts
ADMIN% pts adduser X.Y.11.39 silkhosts
ADMIN% pwd
/afs/whee/project/silk
ADMIN% fs sa . silkhosts rlidwk
ADMIN%

The failure:

OpenAFS 1.4.7 client

Linux coll 2.6.18-92.el5 #1 SMP x86_64 x86_64 x86_64 GNU/Linux

~:coll> ifconfig -a | grep 129
inet addr:X.Y.11.39  Bcast:X.Y.11.255  Mask:255.255.254.0
~:coll>
~:coll> cd /afs/whee/project
~:coll> cd silk
-bash: cd: silk: Permission denied
~:coll>