[OpenAFS] OpenAFS on Yosemite

[Benjamin Kaduk]

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

---559023410-1989485411-1466041484=:18480
Content-Type: TEXT/PLAIN; charset=UTF-8
Content-Transfer-Encoding: QUOTED-PRINTABLE

Two notes: (1)your output includes the string "Auristor rxgk", which makes
me think that you are not using stock OpenAFS...
(2) the OS X GSSAPI library supports many more mechanisms than kerberos,
so it would be good to see the klist output as both users before (and
after, I suppose) aklog, and/or try to explicitly get credentials using
/usr/bin/kinit

-Ben

On Wed, 15 Jun 2016, Green, James wrote:

> I'm trying to get OpenAFS working under Yosemite on my Macbook Pro with t=
he YFS/Auristor client.  When executing aklog at the command line, I am see=
ing this strange behavior: as root, aklog succeeds and receives a token, bu=
t as a regular user, it segfaults.  See transcript below.  Something is bro=
ken somewhere, highly likely to have been caused by me.  But I am at a loss=
, any suggestions or insight would be greatly appreciated, thanks.
>
> AS ROOT:
> sh-3.2# /usr/local/bin/aklog -d
> Authenticating to cell msu.edu.
> =3D=3D=3D=3D=3D=3D=3D=3D Auristor rxgk =3D=3D=3D=3D=3D=3D=3D=3D
> GSSAPI Error [851968:2529638919]
>  Miscellaneous failure (see text)
> Matching credential (yfs-rxgk/_afs.msu.edu@MSU.EDU) not found
> -------- failed --------
> =3D=3D=3D=3D=3D=3D=3D=3D rxkad =3D=3D=3D=3D=3D=3D=3D=3D
> Trying to authenticate to user's realm MSU.EDU.
> Matching credential (afs/msu.edu@MSU.EDU) not found while getting credent=
ials
> We've deduced that we need to authenticate to realm MSU.EDU.
> Matching credential (afs/msu.edu@MSU.EDU) not found while getting credent=
ials
> Using Kerberos V5 ticket natively
> -------- succeeded --------
> sh-3.2# tokens
>
> Tokens held by the Cache Manager:
>
> User's (AFS ID 15999) rxkad tokens for msu.edu [Expires Jun 16 00:06]
>    --End of list--
>
> AS REGULAR USER:
> jfgreen@jglt =EE=82=B0 ~ =EE=82=B0 /usr/local/bin/aklog -d
> Authenticating to cell msu.edu.
> =3D=3D=3D=3D=3D=3D=3D=3D Auristor rxgk =3D=3D=3D=3D=3D=3D=3D=3D
> GSSAPI Error [851968:2529639048]
>  Miscellaneous failure (see text)
> unknown mech-code 2529639048 for mech unknown
> [1]    2289 segmentation fault  /usr/local/bin/aklog -d
>
>  =E2=9C=98 jfgreen@jglt =EE=82=B0 ~ =EE=82=B0 tokens
>
> Tokens held by the Cache Manager:
>
>    --End of list--
>
---559023410-1989485411-1466041484=:18480--