[OpenAFS] OS X Lion OpenAFS Client not acquiring ticket through
"AFS Menu"
Thomas Smith
theitsmith@gmail.com
Tue, 27 Dec 2011 14:03:07 -0700
--20cf303ddac2c0b5aa04b51935b1
Content-Type: text/plain; charset=ISO-8859-1
That resolved the issue! Thanks Derrick!
On Fri, Dec 23, 2011 at 1:48 PM, Derrick Brashear <shadow@gmail.com> wrote:
> Try 1.6.1pre1 on Lion and let me know what you find
>
> Derrick
>
>
> On Dec 23, 2011, at 15:37, Thomas Smith <theitsmith@gmail.com> wrote:
>
> It's not a problem destroying the tickets, I never do that anyway--I was
> just testing functionality and thought that information may be relevant
> (that the Client is able to delete the token and ticket but not create
> either of them). :-)
>
> I didn't include this in my original email but I'm running version 1.6.0
> of the Client.
>
> On Fri, Dec 23, 2011 at 1:25 PM, David Botsch < <botsch@cnf.cornell.edu>
> botsch@cnf.cornell.edu> wrote:
>
>> The snow leopard of the gui Afs Tokens app works to get tokens on lion.
>> It crashes on destroying tokens, but may actually do it. You can choose in
>> the preferences whether or not to also destroy tickets.
>> On Dec 23, 2011 3:21 PM, "Thomas Smith" < <theitsmith@gmail.com>
>> theitsmith@gmail.com> wrote:
>>
>>> On Snow Leopard, I was able to go to the menu and select "Get New Token"
>>> and I would be prompted with a Kerberos login prompt--once authenticated,
>>> the Client would acquire a token. This functionality isn't working in Lion.
>>> I have to manually use Ticket Viewer or kinit to secure a ticket and then
>>> run aklog to get a token. (I've also tried getting a ticket first and then
>>> selecting "Get New Token" and had the same result.)
>>>
>>> Once I have a token, however, I am able to release it through the "AFS
>>> Menu" (this also destroys my kerberos ticket).
>>>
>>> Any suggestions on what might be causing this problem? The only thing I
>>> found that was preventing things from working initially was a kerberos
>>> setting that I didn't utilize in Snow Leopard, "allow_weak_crypto =
>>> true"--once I added this, things began working from the CLI just not
>>> through the GUI (which includes the OpenAFS preferences pane.
>>>
>>> ~ Tom
>>>
>>
>
>
> --
> Thomas Smith
> Cell: 602-882-2917
>
>
--
Thomas Smith
Cell: 602-882-2917
--20cf303ddac2c0b5aa04b51935b1
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div>That resolved the issue! Thanks Derrick!</div><div><br><div class=3D"g=
mail_quote">On Fri, Dec 23, 2011 at 1:48 PM, Derrick Brashear <span dir=3D"=
ltr"><<a href=3D"mailto:shadow@gmail.com">shadow@gmail.com</a>></span=
> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div bgcolor=3D"#FFFFFF"><div>Try 1.6.1pre1 =
on Lion and let me know what you find<span class=3D"HOEnZb"><font color=3D"=
#888888"><br>
<br>Derrick<div><br></div></font></span></div><div><div class=3D"h5"><div><=
br>On Dec 23, 2011, at 15:37, Thomas Smith <<a href=3D"mailto:theitsmith=
@gmail.com" target=3D"_blank">theitsmith@gmail.com</a>> wrote:<br><br></=
div>
<div></div><blockquote type=3D"cite"><div>It's not a problem destroying=
the tickets, I never do that anyway--I was just testing functionality and =
thought that information may be relevant (that the Client is able to delete=
the token and ticket but not create either of them). :-)<div>
<br></div><div>I didn't include this in my original email but I'm r=
unning version 1.6.0 of the Client.<br><br><div class=3D"gmail_quote">On Fr=
i, Dec 23, 2011 at 1:25 PM, David Botsch <span dir=3D"ltr"><<a href=3D"m=
ailto:botsch@cnf.cornell.edu" target=3D"_blank"></a><a href=3D"mailto:botsc=
h@cnf.cornell.edu" target=3D"_blank">botsch@cnf.cornell.edu</a>></span> =
wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><p>The snow leopard of the gui Afs Tokens ap=
p works to get tokens on lion. It crashes on destroying tokens, but may act=
ually do it. You can choose in the preferences whether or not to also destr=
oy tickets.</p>
<div><div>
<div class=3D"gmail_quote">On Dec 23, 2011 3:21 PM, "Thomas Smith"=
; <<a href=3D"mailto:theitsmith@gmail.com" target=3D"_blank"></a><a href=
=3D"mailto:theitsmith@gmail.com" target=3D"_blank">theitsmith@gmail.com</a>=
> wrote:<br type=3D"attribution">
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
On Snow Leopard, I was able to go to the menu and select "Get New Toke=
n" and I would be prompted with a Kerberos login prompt--once authenti=
cated, the Client would acquire a token. This functionality isn't worki=
ng in Lion. I have to manually use Ticket Viewer or kinit to secure a ticke=
t and then run aklog to get a token. (I've also tried getting a ticket =
first and then selecting "Get New Token" and had the same result.=
)<div>
<br></div><div>Once I have a token, however, I am able to release it throug=
h the "AFS Menu" (this also destroys my kerberos ticket).</div><d=
iv><br></div><div>Any suggestions on what might be causing this problem? Th=
e only thing I found that was preventing things from working initially was =
a kerberos setting that I didn't utilize in Snow Leopard, "allow_w=
eak_crypto =3D true"--once I added this, things began working from the=
CLI just not through the GUI (which includes the OpenAFS preferences pane.=
<br>
<div><br>
</div></div><div>~ Tom</div>
</blockquote></div>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
<div>Thomas Smith</div><div>Cell:
<a href=3D"tel:602-882-2917" value=3D"+16028822917" target=3D"_blank">602-=
882-2917</a></div><br>
</div>
</div></blockquote></div></div></div></blockquote></div><br><br clear=3D"al=
l"><div><br></div>-- <br><div>Thomas Smith</div><div>Cell:
602-882-2917</div><br>
</div>
--20cf303ddac2c0b5aa04b51935b1--