[OpenAFS] Re: AFS + CrossRealm + FreeIPA + Migration
Mon, 10 Nov 2014 15:53:40 -0600
On Mon, 10 Nov 2014 10:09:54 +0100
Andreas Ladanyi <email@example.com> wrote:
> Now aklog works and i can get a AFS token. Why are all this keys
> important for aklog ? Or which key exeptly the DES key is important ?
That is indeed a bit puzzling; it's possible ipa-getkeytab does
something else that makes this work, but I don't know enough about the
details of what that does. I assume the tokens you get with 'aklog' work
What enctype is listed for the afs/cell@REALM principal if you run
'klist -ef' after you have a token? What version of openafs is on the
client where you're running 'aklog'?