[OpenAFS] Re: Moving Magic Trio to another domain

Jukka Tuominen jukka.tuominen@finndesign.fi
Wed, 2 Oct 2013 21:39:44 +0300 (EEST)


> On Wed, 2 Oct 2013 20:42:18 +0300 (EEST)
> "Jukka Tuominen" <jukka.tuominen@finndesign.fi> wrote:
>
>> nsswitch.conf BTW
>>
>> passwd:  afs files
>> group:   afs files afspag
>> shadow:  files

BTW, I tried to change the order, but no change there.
>
> Where is your home directory information stored? It's not in afs; we
> don't have a place for that that I'm aware of. The home directories
> themselves may be in afs, but the information that "user X has home
> directory /afs/foo/user/X" is not stored in an openafs database.

According to
http://techpubs.spinlocksolutions.com/dklar/afs.html
libnss-afs provides that, assuming afs homedir path convention (which are
used in this case)

>
>> > This doesn't seem to have much to do with openafs anymore.
>>
>> The reason why I ask this here was because when I had a faulty
>> host-princ generated and added to the client's keytab, an
>> authorization error was raised, similarly. So, I'm unsure whether the
>> gdm is the source of the problem or the symptom of the authorization
>> error elsewhere. AFAIU, afs is responsible of the authorization, am I
>> wrong?. But if you feel this is out of the scope of this mailing list,
>> I will seek the solution elsewhere.
>
> I assume the errors you get from gdm are because gdm cannot get some
> information about "username" from the system. But I don't know enough
> about gdm to know what exactly it is failing on.
>
> Try running:
>
> $ getent passwd username
>
> on both systems. Does the output differ?

No, both succeed.

br, jukka

>
> --
> Andrew Deason
> adeason@sinenomine.net
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>