[OpenAFS] aklog: unknown RPC error (-1765328370) while getting AFS tickets

Jose M Calhariz jose.calhariz@tecnico.ulisboa.pt
Wed, 14 Sep 2022 17:57:44 +0100


--8t9RHnE3ZwKMSgU+
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 12, 2022 at 12:12:52PM -0400, Jeffrey E Altman wrote:
> On 9/12/2022 11:49 AM, Jose M Calhariz (jose.calhariz@tecnico.ulisboa.pt)
> wrote:
> > Todo the setup of the cell I was following the instrtuctions from Debian
> > 9. So I have done:
> > kadmin.local
> > addprinc -randkey -e des-cbc-crc:v4 afs
> > ktadd -k /root/afs.keytab -e des-cbc-crc:v4 afs
> > getprinc afs
> > quit
>=20
> There are a couple of things wrong with these directions.
>=20
> 1. The service principal that should be created is "afs/<cellname>" not
>    "afs".
> 2. The encryption types that must be added are afs256-cts-hmac-sha1-96
>    and rc4-hmac (if you wish to support Windows clients)
>=20

My updated instructions are:

kadmin.local
addprinc -randkey -e aes256-cts-hmac-sha1-96 afs
ktadd -k /root/rxkad.keytab afs
getprinc afs
quit

And submitted a bug report to Debian because I think the problem is
still present on newer versions.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1019751



Thank you everyone.

Kind regards
Jose M Calhariz


--=20
--

Os homens n=E3o ficam mais espertos com a idade. Apenas perdem mais cabelos

--Preston Sturges

--8t9RHnE3ZwKMSgU+
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=TlSb
-----END PGP SIGNATURE-----

--8t9RHnE3ZwKMSgU+--