[OpenAFS] ADS and MIT Kerberos transition auth continued

Russ Allbery rra@stanford.edu
Wed, 01 Jul 2009 13:57:35 -0700


Eric Chris Garrison <ecgarris@iupui.edu> writes:

> What I'm seeing now though, is that although used asetkey to add the
> service principal from the ADS realm to my test cell, permissions
> aren't working as I'd expect.
>
> So, we have realm AFSTEST.IU.EDU and ADS.IU.EDU.  Both in the KeyFile and
> in the /usr/afs/etc/krb.conf and both listed in the /etc/krb5.conf.

What's the kadmin examine output (or Heimdal equivalent) for the afs
principal for your AFS cell in ADS.IU.EDU?

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>