[OpenAFS] Re: Windows AD Kerberos - "bad ticket" error

Andrew Deason adeason@sinenomine.net
Fri, 26 Feb 2010 14:24:34 -0600


On Fri, 26 Feb 2010 14:12:34 -0500
"Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu> wrote:

> > Otherwise, is there a way for aklog to not bother getting a ticket
> > for the "afs@MYCELL.EDU" principal, and just use
> > "afs/mycell.edu@MYCELL.EDU "?
> 
> That's what it should be doing; only if that principal can't be found  
> or otherwise fails will it fall back to afs@.

And you can see if it is not doing so for some reason by running
'aklog -d', which should tell you what principal it is using.

-- 
Andrew Deason
adeason@sinenomine.net