[OpenAFS] OS X Lion OpenAFS Client not acquiring ticket through "AFS Menu"

Fri, 23 Dec 2011 15:48:37 -0500

--Apple-Mail-5-621252849
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Try 1.6.1pre1 on Lion and let me know what you find

Derrick

On Dec 23, 2011, at 15:37, Thomas Smith <theitsmith@gmail.com> wrote:

> It's not a problem destroying the tickets, I never do that anyway--I was j=
ust testing functionality and thought that information may be relevant (that=
 the Client is able to delete the token and ticket but not create either of t=
hem). :-)
>=20
> I didn't include this in my original email but I'm running version 1.6.0 o=
f the Client.
>=20
> On Fri, Dec 23, 2011 at 1:25 PM, David Botsch <botsch@cnf.cornell.edu> wro=
te:
> The snow leopard of the gui Afs Tokens app works to get tokens on lion. It=
 crashes on destroying tokens, but may actually do it. You can choose in the=
 preferences whether or not to also destroy tickets.
>=20
> On Dec 23, 2011 3:21 PM, "Thomas Smith" <theitsmith@gmail.com> wrote:
> On Snow Leopard, I was able to go to the menu and select "Get New Token" a=
nd I would be prompted with a Kerberos login prompt--once authenticated, the=
 Client would acquire a token. This functionality isn't working in Lion. I h=
ave to manually use Ticket Viewer or kinit to secure a ticket and then run a=
klog to get a token. (I've also tried getting a ticket first and then select=
ing "Get New Token" and had the same result.)
>=20
> Once I have a token, however, I am able to release it through the "AFS Men=
u" (this also destroys my kerberos ticket).
>=20
> Any suggestions on what might be causing this problem? The only thing I fo=
und that was preventing things from working initially was a kerberos setting=
 that I didn't utilize in Snow Leopard, "allow_weak_crypto =3D true"--once I=
 added this, things began working from the CLI just not through the GUI (whi=
ch includes the OpenAFS preferences pane.
>=20
> ~ Tom
>=20
>=20
>=20
> --=20
> Thomas Smith
> Cell: 602-882-2917
>=20

--Apple-Mail-5-621252849
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
	charset=utf-8

<html><body bgcolor="#FFFFFF"><div>Try 1.6.1pre1 on Lion and let me know what you find<br><br>Derrick<div><br></div></div><div><br>On Dec 23, 2011, at 15:37, Thomas Smith &lt;<a href="mailto:theitsmith@gmail.com">theitsmith@gmail.com</a>&gt; wrote:<br><br></div><div></div><blockquote type="cite"><div>It's not a problem destroying the tickets, I never do that anyway--I was just testing functionality and thought that information may be relevant (that the Client is able to delete the token and ticket but not create either of them). :-)<div>
<br></div><div>I didn't include this in my original email but I'm running version 1.6.0 of the Client.<br><br><div class="gmail_quote">On Fri, Dec 23, 2011 at 1:25 PM, David Botsch <span dir="ltr">&lt;<a href="mailto:botsch@cnf.cornell.edu"><a href="mailto:botsch@cnf.cornell.edu">botsch@cnf.cornell.edu</a></a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p>The snow leopard of the gui Afs Tokens app works to get tokens on lion. It crashes on destroying tokens, but may actually do it. You can choose in the preferences whether or not to also destroy tickets.</p>
<div class="HOEnZb"><div class="h5">
<div class="gmail_quote">On Dec 23, 2011 3:21 PM, "Thomas Smith" &lt;<a href="mailto:theitsmith@gmail.com" target="_blank"><a href="mailto:theitsmith@gmail.com">theitsmith@gmail.com</a></a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

On Snow Leopard, I was able to go to the menu and select "Get New Token" and I would be prompted with a Kerberos login prompt--once authenticated, the Client would acquire a token. This functionality isn't working in Lion. I have to manually use Ticket Viewer or kinit to secure a ticket and then run aklog to get a token. (I've also tried getting a ticket first and then selecting "Get New Token" and had the same result.)<div>

<br></div><div>Once I have a token, however, I am able to release it through the "AFS Menu" (this also destroys my kerberos ticket).</div><div><br></div><div>Any suggestions on what might be causing this problem? The only thing I found that was preventing things from working initially was a kerberos setting that I didn't utilize in Snow Leopard, "allow_weak_crypto = true"--once I added this, things began working from the CLI just not through the GUI (which includes the OpenAFS preferences pane.<br>

<div><br>
</div></div><div>~ Tom</div>
</blockquote></div>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div>Thomas Smith</div><div>Cell:
 602-882-2917</div><br>
</div>
</div></blockquote></body></html>
--Apple-Mail-5-621252849--