Fwd: [OpenAFS] "reauth" code?

Gary Gatling gsgatlin@ncsu.edu
Fri, 31 Aug 2012 16:02:55 -0400


--bcaec54eeeb21987aa04c895470f
Content-Type: text/plain; charset=ISO-8859-1

On Fri, Aug 31, 2012 at 3:56 PM, Brandon Allbery <allbery.b@gmail.com>wrote:
>
>
> Um.  klog means you are using kaserver, which is krb4 only (and has
> significant security issues; make it go away).  kinit and k5start are not
> going to work, unless you have things configured such that keys can come
> from a kaserver or a separate krb5 KDC (look for a krb.conf in the AFS
> server config and multiple kvno-s listed by asetkey) in which case you need
> to find out what it takes to get the principal added to the latter.
>
>
Ok. Thanks for all that useful info!

Waiting to hear back from the administrator of the kerberos servers and our
AFS database servers. (Jack Neely) about why klog is even working here.

Thanks guys!

--bcaec54eeeb21987aa04c895470f
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<br><br><div class=3D"gmail_quote">On Fri, Aug 31, 2012 at 3:56 PM, Brandon=
 Allbery <span dir=3D"ltr">&lt;<a href=3D"mailto:allbery.b@gmail.com" targe=
t=3D"_blank">allbery.b@gmail.com</a>&gt;</span> wrote:<blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex">
<div dir=3D"ltr"><div class=3D"im"><div class=3D"gmail_quote"><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;=
padding-left:1ex"><div><div></div></div></blockquote></div><br></div>Um. =
=A0klog means you are using kaserver, which is krb4 only (and has significa=
nt security issues; make it go away). =A0kinit and k5start are not going to=
 work, unless you have things configured such that keys can come from a kas=
erver or a separate krb5 KDC (look for a krb.conf in the AFS server config =
and multiple kvno-s listed by asetkey) in which case you need to find out w=
hat it takes to get the principal added to the latter.<div class=3D"im">
<div><br></div></div></div></blockquote><div><br></div><div>Ok. Thanks for =
all that useful info!</div><div><br></div><div>Waiting to hear back from th=
e administrator of the kerberos servers and our AFS database servers. (Jack=
 Neely) about why klog is even working here.</div>
<div><br></div><div>Thanks guys!</div></div>

--bcaec54eeeb21987aa04c895470f--