[OpenAFS] Re: asetkey: failed to set key, code 70354694

Jeff Blaine jblaine@kickflop.net
Thu, 06 Jan 2011 10:30:25 -0500


It's talking to a Solaris 9 OpenAFS 1.4.6 server (the only
one like that in our cell).  Solaris 10 and OpenAFS 1.4.11
on all other servers.

I rebooted it though after the KeyFile update due to it
seeming a little out of whack (AFS DB server only).

On 1/6/2011 9:46 AM, Derrick Brashear wrote:
> Same AFS version everywhere? Some older version had a bug and would
> hang when rereading KeyFile, but it shouldn't cause this.
> Use tcpdump and figure out which server is returning that error, or,
> install a 1.5.78 client and see which server it logs the error about?
>
> On Thu, Jan 6, 2011 at 8:50 AM, Jeff Blaine<jblaine@kickflop.net>  wrote:
>> Hmm, not so fast I guess.  *Some* hosts are still doing
>> this, others are fine (???).
>>
>> All /usr/afs/etc/KeyFile files checksum the same on our
>> servers.
>>
>> rcf-smtp% ssh vegas
>> Password:
>> Last login: Thu Jan  6 08:04:52 2011 from rcf-smtp.our.
>> afs: Tokens for user of AFS id 26560 for cell rcf.our.org are discarded
>> (rxkad error=19270408)
>> %
>> % translate_et 19270408
>> 19270408 (rxk).8 = ticket contained unknown key version number
>> % kinit
>> Password for jblaine@RCF.OUR.ORG:
>> % aklog
>> % logout
>>
>> rcf-smtp% ssh vegas
>> Password:
>> Last login: Thu Jan  6 08:28:51 2011 from rcf-smtp.our.
>> afs: Tokens for user of AFS id 26560 for cell rcf.our.org are discarded
>> (rxkad error=19270408)
>> %
>>
>>
>> On 1/5/2011 8:37 PM, Jeff Blaine wrote:
>>>
>>> Thanks all -- that did it.
>>>
>>> On 1/5/2011 5:47 PM, Andrew Deason wrote:
>>>>
>>>> On Wed, 05 Jan 2011 17:36:57 -0500
>>>> Jeff Blaine<jblaine@kickflop.net>  wrote:
>>>>
>>>>> etc-upserver-host# asetkey add 17 /etc/krb5.keytab afs
>>>>> asetkey: failed to set key, code 70354694.
>>>>> etc-upserver-host#
>>>>
>>>> $ translate_et 70354694
>>>> 70354694 (acfg).6 = no more entries
>>>>
>>>> aka AFSCONF_FULL. You can only have 8 keys at once iirc; how many do you
>>>> have in there?
>>>>
>>> _______________________________________________
>>> OpenAFS-info mailing list
>>> OpenAFS-info@openafs.org
>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>>
>> _______________________________________________
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>
>
>
>