[OpenAFS] krb5 trust, rxkad error=19270408... I'm missing something
Douglas E. Engert
Wed, 04 Apr 2012 09:35:25 -0500
On 4/3/2012 9:34 PM, clark wrote:
> I have the same probleme.
> I try to use the AD Kdc for my new cell authentification ...
> I found a lot of doc :
> But "pts: ticket contained unknown key version number" is already present.
> I check, kvno is the same in AD and in AFS KeyFile (asetkey)
> Anybody have a solution ??
Running Wireshark while doing the aklog might help, as it is good
at formatting the Kerberos tickets returned by AD and show the KVNOs.
If any of the DCs are read only (RODC) there may be an issue as Microsoft
is using part of the KVNO in the ticket to indicate a read only DC.
Google for: RODC OpenAFS
as there has been other discussions.
> OpenAFS-info mailing list
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439