[OpenAFS] Re: build error when linking with heimdal-dev (Re: [OpenAFS] bosserver -noauth& changes cell to localcell)

[Ted Creedon]

1. Create default ThisCell/CellServDB files in the path the servers expect.
yes
2. Use asetkey to create the KeyFile/KeyFileEx
yes
3. Start the bosserver (without -noauth)
yes and it exits here
4. Run authenticated bos to setup the cellname, hosts, and superusers
never gets this far

________________________________________
From: Michael Meffie <mmeffie@sinenomine.net>
Sent: Friday, April 14, 2017 10:37 AM
To: Ted Creedon
Cc: openafs-info@openafs.org
Subject: Re: [OpenAFS] Re: build error when linking with heimdal-dev (Re: [=
OpenAFS] bosserver -noauth& changes cell to localcell)

On Fri, 14 Apr 2017 02:51:45 +0000
Ted Creedon <tcreedon@easystreet.net> wrote:

> The strace is ~ 40 lines long & is useless..
>
> what (dir, file) permissions are required?
>
> I'd suggest removing any cell improvements since the error messages are m=
isleading.

Hi Ted,

The feature Jeff described, in which the bosserver creates a default cell
configuration if it is missing, is not a new feature. It's been present sin=
ce
OpenAFS 1.0.  Basically, the bosserver will create a ThisCell/CellServDB fi=
le
with default values if they are not present.  Perhaps something else is set=
ting
those default values. Are you running some scripts or something else?

By the way, the -noauth flag isn't normally needed any longer for setting u=
p a
new cell. It was useful back in the kaserver days, since you needed -noauth=
 to
create the service keys with kaserver, but in a modern setup, you do not ne=
ed
-noauth if you set the service key before you start the bosserver.

You can set the key with asetkey before running the bosserver. However, one
minor complication; in the current releases (and master) asetkey does requi=
re
the cell configuration to be present (CellServDB/ThisCell). They can be def=
ault
values for asetkey.

You can do the following:

1. Create default ThisCell/CellServDB files in the path the servers expect.
2. Use asetkey to create the KeyFile/KeyFileEx
3. Start the bosserver (without -noauth)
4. Run authenticated bos to setup the cellname, hosts, and superusers

Thanks,
Mike

--
Michael Meffie <mmeffie@sinenomine.net>