[OpenAFS] Can't get tokens since upgrading to 1.7.6 and Heimdal

Brandon Allbery allbery.b@gmail.com
Fri, 16 Mar 2012 10:00:23 -0400


--e89a8fb20628422d7704bb5ca1cb
Content-Type: text/plain; charset=UTF-8

On Fri, Mar 16, 2012 at 09:41, Jeff Blaine <jblaine@kickflop.net> wrote:

> A sanity check on this would be greatly appreciated.
>>
>
> I've shot myself in the foot before here (a few times).
>
> So then to migrate from afs@REALM to afs/cell@REALM without
> interruption:
>
> 1. Create afs/cell@REALM just as afs@REALM was
> 2. Extract keytab for afs/cell@RALM
>

Make sure the afs/cell key has a different kvno from the afs key, since the
kvno is the only way the AFS servers have to distinguish them.

-- 
brandon s allbery                                      allbery.b@gmail.com
wandering unix systems administrator (available)     (412) 475-9364 vm/sms

--e89a8fb20628422d7704bb5ca1cb
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">On Fri, Mar 16, 2012 at 09:41, Jeff Blaine <span dir=3D"lt=
r">&lt;<a href=3D"mailto:jblaine@kickflop.net">jblaine@kickflop.net</a>&gt;=
</span> wrote:<br><div class=3D"gmail_quote"><blockquote class=3D"gmail_quo=
te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"=
>
<div class=3D"im"><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex">A sanity check on this wou=
ld be greatly appreciated.<br></blockquote></div>
<br>
I&#39;ve shot myself in the foot before here (a few times).<br>
<br>
So then to migrate from afs@REALM to afs/cell@REALM without<br>
interruption:<br>
<br>
1. Create afs/cell@REALM just as afs@REALM was<br>
2. Extract keytab for afs/cell@RALM<br>
</blockquote><div><br></div><div>Make sure the afs/cell key has a different=
 kvno from the afs key, since the kvno is the only way the AFS servers have=
 to distinguish them.</div><div><br></div></div>-- <br>brandon s allbery =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"mailt=
o:allbery.b@gmail.com" target=3D"_blank">allbery.b@gmail.com</a><br>
wandering unix systems administrator (available) =C2=A0 =C2=A0 (412) 475-93=
64 vm/sms<br><br>
</div>

--e89a8fb20628422d7704bb5ca1cb--