[OpenAFS] About the upgrading from Kerberos 4 to Kerberos 5

huangql huangql@ihep.ac.cn
Tue, 15 May 2018 16:52:40 +0800


This is a multi-part message in MIME format.

------=_001_NextPart801457632176_=----
Content-Type: text/plain;
	charset="GB2312"
Content-Transfer-Encoding: base64
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------=_001_NextPart801457632176_=----
Content-Type: text/html;
	charset="GB2312"
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charse=
t=3DGB2312"><style>body { line-height: 1.5; }body { font-size: 10.5pt; fon=
t-family: =CE=A2=C8=ED=D1=C5=BA=DA; color: rgb(0, 0, 0); line-height: 1.5;=
 }</style></head><body>=0A<div><span></span><div style=3D"font-family: =CE=
=A2=C8=ED=D1=C5=BA=DA, Tahoma;">Hi all,</div><div style=3D"font-family: =
=CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><br></div><div style=3D"font-family: =
=CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><br></div><div style=3D"font-family: =
=CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;">We are working on the upgrading of Open=
afs Kerberos 4 to KDC 5. We checked some documents to know we have to use =
afs2k5db tool to convert users in K4 to KDC 5. But it's really a pain to c=
ompile it with Openafs-1.4.14-1 and&nbsp;<span style=3D"background-color: =
rgba(0, 0, 0, 0); font-size: 10.5pt; line-height: 1.5;">krb5-server-1.10.3=
-65.el6.x86-64 due to the incompitable of the higher version of krb5 and A=
FS.</span></div><div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, Tahom=
a;"><span style=3D"background-color: rgba(0, 0, 0, 0); font-size: 10.5pt; =
line-height: 1.5;"><br></span></div><div style=3D"font-family: =CE=A2=C8=
=ED=D1=C5=BA=DA, Tahoma;"><span style=3D"background-color: rgba(0, 0, 0, 0=
); font-size: 10.5pt; line-height: 1.5;">I tried to modify the krb2k5db so=
urce code to eliminate the compile error to generate the tool afs2k5db. Ho=
werver, we failed to convert users with the following error.</span></div><=
div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><span style=
=3D"background-color: rgba(0, 0, 0, 0); font-size: 10.5pt; line-height: 1.=
5;"><br></span></div><div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, =
Tahoma;"><span style=3D"color: rgb(0, 0, 0); background-color: rgba(0, 0, =
0, 0);">[root@afs01&nbsp;src]#&nbsp;./afs2k5db&nbsp;/usr/afs/db/kaserver.D=
B0&nbsp;&gt;&nbsp;anafsuser.out<br>Read&nbsp;of&nbsp;KA&nbsp;database&nbsp=
;header&nbsp;failed:&nbsp;only&nbsp;got&nbsp;37888&nbsp;of&nbsp;65632&nbsp=
;bytes<br></span></div><div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA=
, Tahoma;"><span style=3D"background-color: rgba(0, 0, 0, 0); font-size: 1=
0.5pt; line-height: 1.5;"><br></span></div><div style=3D"font-family: =CE=
=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><span style=3D"background-color: rgba(0, 0=
, 0, 0); font-size: 10.5pt; line-height: 1.5;">Could you help to figure ou=
t the issue? And is there other quick way to migrate the users in kas 4 to=
 KAS 5?</span></div><div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, T=
ahoma;"><span style=3D"background-color: rgba(0, 0, 0, 0); font-size: 10.5=
pt; line-height: 1.5;"><br></span></div><div style=3D"font-family: =CE=A2=
=C8=ED=D1=C5=BA=DA, Tahoma;"><span style=3D"background-color: rgba(0, 0, 0=
, 0); font-size: 10.5pt; line-height: 1.5;">Thanks a lot.</span></div><div=
 style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><span style=3D"b=
ackground-color: rgba(0, 0, 0, 0); font-size: 10.5pt; line-height: 1.5;"><=
br></span></div><div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, Tahom=
a;"><span style=3D"background-color: rgba(0, 0, 0, 0); font-size: 10.5pt; =
line-height: 1.5;">Best Regards,</span></div><div style=3D"font-family: =
=CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><span style=3D"background-color: rgba(0=
, 0, 0, 0); font-size: 10.5pt; line-height: 1.5;">Qiulan&nbsp;</span></div=
><div style=3D"font-family: =CE=A2=C8=ED=D1=C5=BA=DA, Tahoma;"><br></div><=
/div>=0A<hr style=3D"width: 210px; height: 1px;" align=3D"left" color=3D"#=
b5c4df" size=3D"1">=0A<div><span><div style=3D"MARGIN: 10px; FONT-FAMILY: =
verdana; FONT-SIZE: 10pt"><div>huangql</div></div></span></div><div>=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<br>Computing center=
,the Institute of High Energy Physics, CAS, China<br>Qiulan Huang &nbsp; &=
nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Tel: =
(+86) 10 8823 6087<br>P.O. Box 918-7 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &n=
bsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Fax: (+86) 10 8823 6839<br>Beijing=
 100049 &nbsp;P.R. China &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Email: huangql=
@ihep.ac.cn<br>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</=
div>=0A</body></html>
------=_001_NextPart801457632176_=------