[OpenAFS] OS X Lion OpenAFS Client not acquiring ticket through "AFS Menu"

Thomas Smith theitsmith@gmail.com
Fri, 23 Dec 2011 13:19:54 -0700


--14dae93410efd3c59704b4c823dd
Content-Type: text/plain; charset=ISO-8859-1

On Snow Leopard, I was able to go to the menu and select "Get New Token"
and I would be prompted with a Kerberos login prompt--once authenticated,
the Client would acquire a token. This functionality isn't working in Lion.
I have to manually use Ticket Viewer or kinit to secure a ticket and then
run aklog to get a token. (I've also tried getting a ticket first and then
selecting "Get New Token" and had the same result.)

Once I have a token, however, I am able to release it through the "AFS
Menu" (this also destroys my kerberos ticket).

Any suggestions on what might be causing this problem? The only thing I
found that was preventing things from working initially was a kerberos
setting that I didn't utilize in Snow Leopard, "allow_weak_crypto =
true"--once I added this, things began working from the CLI just not
through the GUI (which includes the OpenAFS preferences pane.

~ Tom

--14dae93410efd3c59704b4c823dd
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Snow Leopard, I was able to go to the menu and select "Get New Toke=
n" and I would be prompted with a Kerberos login prompt--once authenti=
cated, the Client would acquire a token. This functionality isn't worki=
ng in Lion. I have to manually use Ticket Viewer or kinit to secure a ticke=
t and then run aklog to get a token. (I've also tried getting a ticket =
first and then selecting "Get New Token" and had the same result.=
)<div>
<br></div><div>Once I have a token, however, I am able to release it throug=
h the &quot;AFS Menu&quot; (this also destroys my kerberos ticket).</div><d=
iv><br></div><div>Any suggestions on what might be causing this problem? Th=
e only thing I found that was preventing things from working initially was =
a kerberos setting that I didn&#39;t utilize in Snow Leopard, &quot;allow_w=
eak_crypto =3D true&quot;--once I added this, things began working from the=
 CLI just not through the GUI (which includes the OpenAFS preferences pane.=
<br>
<div><br>
</div></div><div>~ Tom</div>

--14dae93410efd3c59704b4c823dd--