[OpenAFS] Re: aklog carps Couldn't determine realm of user

Michael Meffie mmeffie@sinenomine.net
Wed, 21 Dec 2016 09:15:58 -0500


On Wed, 21 Dec 2016 02:21:13 +0000
Ted Creedon <tcreedon@easystreet.net> wrote:

> if
> KRB5CCNAME="FILE:/tmp/krb5cc_0"
> is set
> 
> one gets:
> 
> aklog -d
> Authenticating to cell creedon.biz (server ookpik.creedon.biz).
> Trying to authenticate to user's realm CREEDON.BIZ.
> Getting tickets: afs/creedon.biz@CREEDON.BIZ
> Kerberos error code returned by get_cred : -1765328352
> aklog: Couldn't get creedon.biz AFS tickets:
> aklog: Ticket expired while getting AFS tickets

Thanks for testing 1.8.0pre1 Ted.  That error code indicates
the ticket has expired,

krb5 error -1765328352 = KRB5KRB_AP_ERR_TKT_EXPIRED

What does klist show?

Thanks,
Mike