[OpenAFS] OpenAfs+Kerberos+OSXLion+Finder+Two Realms

Ivan Glushkov glushkov.ivan@googlemail.com
Wed, 28 Sep 2011 12:25:16 +0200


On 22.09.2011, at 13:41, Derrick Brashear wrote:

>> User's (AFS ID ***50) tokens for afs@desy.de [Expires Sep 23 08:18]
>> User's (AFS ID ***38) tokens for afs@cern.ch [Expires Sep 23 08:18]
>>   --End of list--
>> ~ >
>=20
> it's silly to hide these (AFS IDs). they give us nothing anyway.

Sorry, I did not know that.

>=20
>> Sometimes
>> only desy.de...
>=20
> what tokens do you have then? get output when only desy works, from =
tokens.


> Here is the output when only desy.de works:

 > pas
glushkov@CERN.CH's Password:=20
Placing tickets for 'glushkov@CERN.CH' in cache 'FILE:/tmp/krb5cc_cern'
glushkov@DESY.DE's Password:=20
Placing tickets for 'glushkov@DESY.DE' in cache 'FILE:/tmp/krb5cc_desy'
~ > touch /afs/desy.de/
Display all 104 possibilities? (y or n)
~ > touch /afs/desy.de/us
user/ usr/ =20
~ > touch /afs/desy.de/user/g/glushkov/testfile99i34rho34
~ > touch /afs/cern.ch/user/g/glushkov/testfile99i34rho34
touch: /afs/cern.ch/user/g/glushkov/testfile99i34rho34: Operation timed =
out
~ > tokens

Tokens held by the Cache Manager:

User's (AFS ID 11450) tokens for afs@desy.de [Expires Sep 29 13:07]
User's (AFS ID 32738) tokens for afs@cern.ch [Expires Sep 29 13:07]
   --End of list--
~ > alias | grep pas
alias pas=3D'kdestroy --all; export KRB5CCNAME=3DFILE:/tmp/krb5cc_cern ; =
kinit -V glushkov@CERN.CH; aklog -force -c cern.ch -k CERN.CH; export =
KRB5CCNAME=3DFILE:/tmp/krb5cc_desy ; kinit -V glushkov@DESY.DE; aklog =
-force -c desy.de -k DESY.DE'