[OpenAFS] speaking of yfs

Aaron Knister aaronk@umbc.edu
Tue, 2 Oct 2012 21:36:16 -0400


--f46d043be1d45f505004cb1dabb5
Content-Type: text/plain; charset=ISO-8859-1

Looks like your keberos realm is missing SRV records to locate its KDCs (it
has AFDB records, though). Here's UMBC's SRV records for its kdcs:

$ dig SRV _kerberos._udp.umbc.edu
;; ANSWER SECTION:
_kerberos._udp.umbc.edu. 85652    IN    SRV    0 0 88 kerberos2.UMBC.EDU.
_kerberos._udp.umbc.edu. 85652    IN    SRV    0 0 88 kerberos.UMBC.EDU.

The same query for SRV records against the asu.edu domain doesn't return
anything.

Check out this URL for more info:
http://web.mit.edu/kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-admin.html#Mapping-Hostnames-onto-Kerberos-Realms

-Aaron

On Tue, Oct 2, 2012 at 9:20 PM, David Bear <David.Bear@asu.edu> wrote:

> yes indeed.
>
>
> On Tue, Oct 2, 2012 at 6:19 PM, Aaron Knister <aaronk@umbc.edu> wrote:
>
>> It works for me in umbc.edu :) can I assume your realm/cell is asu.edu?
>>
>> Sent from my iPad
>>
>> On Oct 2, 2012, at 9:09 PM, David Bear <David.Bear@asu.edu> wrote:
>>
>> > One of our Mac users brought in her ipad and said -- Look -- I can
>> browse afs --
>> >
>> > She found iYFS at the app store -- way cool! Now if we could only have
>> it get a token ..
>> >
>> > --
>> > David Bear
>> > College of Public Programs at ASU
>> > 602-496-0424
>>
>
>
>
> --
> David Bear
> College of Public Programs at ASU
> 602-496-0424
>



-- 
Aaron Knister
Systems Administrator
Division of Information Technology
University of Maryland, Baltimore County
aaronk@umbc.edu

--f46d043be1d45f505004cb1dabb5
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Looks like your keberos realm is missing SRV records to locate its KDCs (it=
 has AFDB records, though). Here&#39;s UMBC&#39;s SRV records for its kdcs:=
<br><br>$ dig SRV _kerberos._<a href=3D"http://udp.umbc.edu">udp.umbc.edu</=
a><br>

;; ANSWER SECTION:<br>_kerberos._<a href=3D"http://udp.umbc.edu">udp.umbc.e=
du</a>. 85652=A0=A0=A0 IN=A0=A0=A0 SRV=A0=A0=A0 0 0 88 <a href=3D"http://ke=
rberos2.UMBC.EDU">kerberos2.UMBC.EDU</a>.<br>_kerberos._<a href=3D"http://u=
dp.umbc.edu">udp.umbc.edu</a>. 85652=A0=A0=A0 IN=A0=A0=A0 SRV=A0=A0=A0 0 0 =
88 <a href=3D"http://kerberos.UMBC.EDU">kerberos.UMBC.EDU</a>.<br>

<br>The same query for SRV records against the <a href=3D"http://asu.edu">a=
su.edu</a> domain doesn&#39;t return anything.<br><br>Check out this URL fo=
r more info: <a href=3D"http://web.mit.edu/kerberos/krb5-1.6/krb5-1.6.3/doc=
/krb5-admin.html#Mapping-Hostnames-onto-Kerberos-Realms">http://web.mit.edu=
/kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-admin.html#Mapping-Hostnames-onto-Ke=
rberos-Realms</a><br>

<br>-Aaron<br><br><div class=3D"gmail_quote">On Tue, Oct 2, 2012 at 9:20 PM=
, David Bear <span dir=3D"ltr">&lt;<a href=3D"mailto:David.Bear@asu.edu" ta=
rget=3D"_blank">David.Bear@asu.edu</a>&gt;</span> wrote:<br><blockquote cla=
ss=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pa=
dding-left:1ex">

yes indeed.=A0<div class=3D"HOEnZb"><div class=3D"h5"><br><br><div class=3D=
"gmail_quote">On Tue, Oct 2, 2012 at 6:19 PM, Aaron Knister <span dir=3D"lt=
r">&lt;<a href=3D"mailto:aaronk@umbc.edu" target=3D"_blank">aaronk@umbc.edu=
</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
It works for me in <a href=3D"http://umbc.edu" target=3D"_blank">umbc.edu</=
a> :) can I assume your realm/cell is <a href=3D"http://asu.edu" target=3D"=
_blank">asu.edu</a>?<br>
<br>
Sent from my iPad<br>
<div><div><br>
On Oct 2, 2012, at 9:09 PM, David Bear &lt;<a href=3D"mailto:David.Bear@asu=
.edu" target=3D"_blank">David.Bear@asu.edu</a>&gt; wrote:<br>
<br>
&gt; One of our Mac users brought in her ipad and said -- Look -- I can bro=
wse afs --<br>
&gt;<br>
&gt; She found iYFS at the app store -- way cool! Now if we could only have=
 it get a token ..<br>
&gt;<br>
&gt; --<br>
&gt; David Bear<br>
&gt; College of Public Programs at ASU<br>
&gt; <a href=3D"tel:602-496-0424" value=3D"+16024960424" target=3D"_blank">=
602-496-0424</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
David Bear<br>College of Public Programs at ASU<br><a href=3D"tel:602-496-0=
424" value=3D"+16024960424" target=3D"_blank">602-496-0424</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><br>-- <br>Aaron Knist=
er<br>Systems Administrator<br>Division of Information Technology<br>Univer=
sity of Maryland, Baltimore County<br><a href=3D"mailto:aaronk@umbc.edu" ta=
rget=3D"_blank">aaronk@umbc.edu</a><br>



--f46d043be1d45f505004cb1dabb5--