[OpenAFS] permission issue when trying to switch kerberos realms.

Harald Barth haba@kth.se
Mon, 15 Jan 2018 13:02:28 +0100 (CET)


Have the two service tickets different kvno (otherwise AFS can not
tell them apart) and are they both installed on your AFS servers?

I would start with a kvno of 1000 or so for the new cell which
hopefully leaves enough headroom for keying the old cell if
necessary.

I actually don't know how high a kvno can be but up to 32767 (2^15-1)
"feels" safe.

Harald.