[OpenAFS] Why do I get "pts: Permission denied" ??

Stefan Michael Guenther s.guenther@in-put.de
Mon, 23 Apr 2012 13:59:15 +0200


------=_Part_3412_9300141.1335182356575
Subject: Why do I get "pts: Permission denied" ??
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi,

our system is a Heimdal Kerberos together with an OpenAFS 1.6.0.1 on a Ubuntu 11.10.

My first attempt was to add myself to the group of administrators:

root@intranet:~#  pts adduser stefan system:administrators -cell in-put.de -noauth
pts: Permission denied ; unable to add user stefan to group system:administrators

Okay, let's try to create a group for myself:

root@intranet:~#  pts creategroup users -noauth -cell in-put.de
pts: Permission denied ; unable to create group users=20

Hm, really no permission=3F

root@intranet:~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: admin@IN-PUT.DE

Valid starting     Expires            Service principal
04/23/12 13:31:43  04/23/12 23:31:43  krbtgt/IN-PUT.DE@IN-PUT.DE
=09renew until 04/23/12 13:31:43
04/23/12 13:31:51  04/23/12 23:31:43  afs/in-put.de@IN-PUT.DE
=09renew until 04/23/12 13:31:43

root@intranet:~# aklog -d
Authenticating to cell in-put.de (server intranet.in-put.de).
Trying to authenticate to user's realm IN-PUT.DE.
Getting tickets: afs/in-put.de@IN-PUT.DE
Using Kerberos V5 ticket natively
Identical tokens already exist; skipping.
root@intranet:~# tokens

Tokens held by the Cache Manager:

User's (AFS ID 1) tokens for afs@in-put.de [Expires Apr 23 23:31]
   --End of list--

Why am I not allowed to add a new user or group=3F

Thanks for any hints.

Stefan

------=_Part_3412_9300141.1335182356575
Content-Type: application/pkcs7-signature; name=smime.p7s; smime-type=signed-data
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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------=_Part_3412_9300141.1335182356575--