[OpenAFS] aklog: a pioctl failed while setting tokens for cell
Jan Pospíšil
honik@kma.zcu.cz
Thu, 25 Jul 2019 11:04:31 +0200
Hello,
I have macOS 10.13.6 (High Sierra) with just installed Security Update 2019-004 and after the update I have problems getting tokens, I am using aklog, see the pioctl error below. I have tried to reinstall AuriStor-client-0.188-HighSierra.dmg, but it did not help. The sequence of commands:
$ kinit
honik@ZCU.CZ's password:
$ klist -f
Credentials cache: API:0989E00B-F996-422A-A9E9-7AAC921E5CEA
Principal: honik@ZCU.CZ
Issued Expires Flags Principal
Jul 24 11:22:54 2019 Jul 24 21:22:50 2019 FIA krbtgt/ZCU.CZ@ZCU.CZ
$ aklog -d
Authenticating to cell zcu.cz.
======== Auristor rxgk ========
GSSAPI Error [851968:2529638919]
Miscellaneous failure (see text)
Matching credential (yfs-rxgk/_afs.zcu.cz@ZCU.CZ) not found
-------- failed --------
======== rxkad ========
Trying to authenticate to user's realm ZCU.CZ.
Using Kerberos V5 ticket natively
-------- succeeded --------
aklog: a pioctl failed while setting tokens for cell zcu.cz
$ klist -f
Credentials cache: API:0989E00B-F996-422A-A9E9-7AAC921E5CEA
Principal: honik@ZCU.CZ
Issued Expires Flags Principal
Jul 24 11:22:54 2019 Jul 24 21:22:50 2019 FIA krbtgt/ZCU.CZ@ZCU.CZ
Jul 24 11:24:15 2019 Jul 24 21:22:50 2019 FA afs/zcu.cz@ZCU.CZ
$ tokens -debug
Tokens held by the Cache Manager:
--End of list—
Surprisingly, on another computer with the same setting (same macOS and client version), the aklog works as expected (the GSSAPI error is probably not the problem):
$ aklog -d
Authenticating to cell zcu.cz.
======== Auristor rxgk ========
GSSAPI Error [851968:2529638919]
Miscellaneous failure (see text)
Matching credential (yfs-rxgk/_afs.zcu.cz@ZCU.CZ) not found
-------- failed --------
======== rxkad ========
Trying to authenticate to user's realm ZCU.CZ.
Using Kerberos V5 ticket natively
-------- succeeded ————
$ tokens
Tokens held by the Cache Manager:
User's (AFS ID 6141) rxkad tokens for zcu.cz [Expires Jul 24 21:37]
--End of list--
Please could someone give me a hint how to investigate further what could cause the problem?
Thank you in advance.
With best regards
Jan
--
Jan Pospisil, Ph.D. e-mail: honik@kma.zcu.cz
University of West Bohemia phone: (+420) 37763-2675
Department of Mathematics fax: (+420) 37763-2602
Plzen, Czech Republic address: Univerzitni 22, 306 14