[OpenAFS] Re: Moving Magic Trio to another domain
Jukka Tuominen
jukka.tuominen@finndesign.fi
Wed, 2 Oct 2013 21:39:44 +0300 (EEST)
> On Wed, 2 Oct 2013 20:42:18 +0300 (EEST)
> "Jukka Tuominen" <jukka.tuominen@finndesign.fi> wrote:
>
>> nsswitch.conf BTW
>>
>> passwd: afs files
>> group: afs files afspag
>> shadow: files
BTW, I tried to change the order, but no change there.
>
> Where is your home directory information stored? It's not in afs; we
> don't have a place for that that I'm aware of. The home directories
> themselves may be in afs, but the information that "user X has home
> directory /afs/foo/user/X" is not stored in an openafs database.
According to
http://techpubs.spinlocksolutions.com/dklar/afs.html
libnss-afs provides that, assuming afs homedir path convention (which are
used in this case)
>
>> > This doesn't seem to have much to do with openafs anymore.
>>
>> The reason why I ask this here was because when I had a faulty
>> host-princ generated and added to the client's keytab, an
>> authorization error was raised, similarly. So, I'm unsure whether the
>> gdm is the source of the problem or the symptom of the authorization
>> error elsewhere. AFAIU, afs is responsible of the authorization, am I
>> wrong?. But if you feel this is out of the scope of this mailing list,
>> I will seek the solution elsewhere.
>
> I assume the errors you get from gdm are because gdm cannot get some
> information about "username" from the system. But I don't know enough
> about gdm to know what exactly it is failing on.
>
> Try running:
>
> $ getent passwd username
>
> on both systems. Does the output differ?
No, both succeed.
br, jukka
>
> --
> Andrew Deason
> adeason@sinenomine.net
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>