Russ Allbery wrote:
> Jeff Blaine <[EMAIL PROTECTED]> writes:
>
>> Can anyone tell me what is going on here? This is what
>> krb5kdc logged when I logged into 129.83.11.213.
>
>> -- sshd + UsePAM
>> -- pam_krb5.so (RHELv4)
>> -- pam_afs_session.so (PAM session module which uses aklog to
>> get tokens from a K5 ticket).
>
>> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
>> etypes {3}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
>> [EMAIL PROTECTED] for afs/[EMAIL PROTECTED], Server not
>> found in Kerberos database
>
>> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
>> etypes {1}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
>> [EMAIL PROTECTED] for afs/[EMAIL PROTECTED], Server not
>> found in Kerberos database
>
>> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
>> etypes {1}) 129.83.11.213: ISSUE: authtime 1176929167, etypes {rep=16
>> tkt=1 ses=1}, [EMAIL PROTECTED] for [EMAIL PROTECTED]
>
> This looks normal to me. aklog tries the afs/<cell> principal first, and
> when it doesn't work, falls back on the older afs@ principal. Is anything
> not working, or were you just wondering about the log messages?
I had a feeling that was the case. Nothing is broken. I was
just curious about the messages.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
