[OpenAFS] Re: Moving Magic Trio to another domain

Andrew Deason adeason@sinenomine.net
Wed, 2 Oct 2013 13:16:25 -0500


On Wed, 2 Oct 2013 20:42:18 +0300 (EEST)
"Jukka Tuominen" <jukka.tuominen@finndesign.fi> wrote:

> nsswitch.conf BTW
> 
> passwd:  afs files
> group:   afs files afspag
> shadow:  files

Where is your home directory information stored? It's not in afs; we
don't have a place for that that I'm aware of. The home directories
themselves may be in afs, but the information that "user X has home
directory /afs/foo/user/X" is not stored in an openafs database.

> > This doesn't seem to have much to do with openafs anymore.
> 
> The reason why I ask this here was because when I had a faulty
> host-princ generated and added to the client's keytab, an
> authorization error was raised, similarly. So, I'm unsure whether the
> gdm is the source of the problem or the symptom of the authorization
> error elsewhere. AFAIU, afs is responsible of the authorization, am I
> wrong?. But if you feel this is out of the scope of this mailing list,
> I will seek the solution elsewhere.

I assume the errors you get from gdm are because gdm cannot get some
information about "username" from the system. But I don't know enough
about gdm to know what exactly it is failing on.

Try running:

$ getent passwd username

on both systems. Does the output differ?

-- 
Andrew Deason
adeason@sinenomine.net