[OpenAFS] Request for Assistance with OpenAFS
Steven Mikes
steven.mikes@globalfoundries.com
Thu, 7 Apr 2016 15:56:59 -0400
--089e0158a9ce9201f7052fea7de2
Content-Type: text/plain; charset=UTF-8
Success! klog.afs worked, I have a token now and can interact normally with
the cell. Thanks everyone for your help!
On Thu, Apr 7, 2016 at 3:30 PM, Jeffrey Altman <jaltman@auristor.com> wrote:
> On 4/7/2016 2:24 PM, Jeffrey Altman wrote:
> > On 4/7/2016 12:59 PM, Steven Mikes wrote:
> >> Hi All,
> >> I am attempting to access an AFS cell which I believe is still using
> >> Kerberos V4. Existing machines in the cell use the 'klog' command
> >> (klog.krb) to obtain tokens.
> >> I'm running Ubuntu 14.04.2 with openAFS 1.6.17, and cannot figure out
> >> how to authenticate. The /usr/bin/klog in my install is symlinked to
> >> /etc/alternatives/klog, which is itself linked back to
> >> /usr/bin/klog.krb5, so there doesn't see to be a v4 version of the
> >> command at all. I know it was deprecated for security reasons and V5 is
> >> the recommended authentication method, but the cell I need to connect to
> >> is still on V4. Is there a way to configure krb5 so I can obtain tokens?
> >> I have tried various options in the /etc/krb5.conf file with no luck
> >> yet. Any help is much appreciated.
> >> -Steven Mikes
> >
> > Steven,
> >
> > I believe the Global Foundries cell is still using the IBM AFS kaserver
> > for authentication. The klog.krb5 and kinit/aklog authentication
> > methods will not work with it. Only the kauth version of klog can be
> > used to authenticate with the kaserver.
>
> Try executing klog.afs. It should be installed as part of the
> openafs-client package.
>
> > Jeffrey Altman
> > AuriStor, Inc.
>
>
>
--
*Steven Mikes*
Integrated Circuit Designer
Global Foundries
--089e0158a9ce9201f7052fea7de2
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Success! klog.afs worked, I have a token now and can inter=
act normally with the cell.=C2=A0 Thanks everyone for your help!</div><div =
class=3D"gmail_extra"><br><div class=3D"gmail_quote">On Thu, Apr 7, 2016 at=
3:30 PM, Jeffrey Altman <span dir=3D"ltr"><<a href=3D"mailto:jaltman@au=
ristor.com" target=3D"_blank">jaltman@auristor.com</a>></span> wrote:<br=
><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1=
px #ccc solid;padding-left:1ex"><span class=3D"">On 4/7/2016 2:24 PM, Jeffr=
ey Altman wrote:<br>
> On 4/7/2016 12:59 PM, Steven Mikes wrote:<br>
>> Hi All,<br>
>> I am attempting to access an AFS cell which I believe is still usi=
ng<br>
>> Kerberos V4. Existing machines in the cell use the 'klog' =
command<br>
>> (klog.krb) to obtain tokens.<br>
>> I'm running Ubuntu 14.04.2 with openAFS 1.6.17, and cannot fig=
ure out<br>
>> how to authenticate. The /usr/bin/klog in my install is symlinked =
to<br>
>> /etc/alternatives/klog, which is itself linked back to<br>
>> /usr/bin/klog.krb5, so there doesn't see to be a v4 version of=
the<br>
>> command at all. I know it was deprecated for security reasons and =
V5 is<br>
>> the recommended authentication method, but the cell I need to conn=
ect to<br>
>> is still on V4. Is there a way to configure krb5 so I can obtain t=
okens?<br>
>> I have tried various options in the /etc/krb5.conf file with no lu=
ck<br>
>> yet. Any help is much appreciated.<br>
>> -Steven Mikes<br>
><br>
> Steven,<br>
><br>
> I believe the Global Foundries cell is still using the IBM AFS kaserve=
r<br>
> for authentication.=C2=A0 The klog.krb5 and kinit/aklog authentication=
<br>
> methods will not work with it.=C2=A0 Only the kauth version of klog ca=
n be<br>
> used to authenticate with the kaserver.<br>
<br>
</span>Try executing klog.afs.=C2=A0 It should be installed as part of the<=
br>
openafs-client package.<br>
<br>
> Jeffrey Altman<br>
> AuriStor, Inc.<br>
<br>
<br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><div class=
=3D"gmail_signature"><div dir=3D"ltr"><b>Steven Mikes</b><div>Integrated Ci=
rcuit Designer</div><div>Global Foundries</div></div></div>
</div>
--089e0158a9ce9201f7052fea7de2--