Russ Allbery wrote: > Jeff Blaine <[EMAIL PROTECTED]> writes: > >> Can anyone tell me what is going on here? This is what >> krb5kdc logged when I logged into 129.83.11.213. > >> -- sshd + UsePAM >> -- pam_krb5.so (RHELv4) >> -- pam_afs_session.so (PAM session module which uses aklog to >> get tokens from a K5 ticket). > >> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1 >> etypes {3}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167, >> [EMAIL PROTECTED] for afs/[EMAIL PROTECTED], Server not >> found in Kerberos database > >> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1 >> etypes {1}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167, >> [EMAIL PROTECTED] for afs/[EMAIL PROTECTED], Server not >> found in Kerberos database > >> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1 >> etypes {1}) 129.83.11.213: ISSUE: authtime 1176929167, etypes {rep=16 >> tkt=1 ses=1}, [EMAIL PROTECTED] for [EMAIL PROTECTED] > > This looks normal to me. aklog tries the afs/<cell> principal first, and > when it doesn't work, falls back on the older afs@ principal. Is anything > not working, or were you just wondering about the log messages?
I had a feeling that was the case. Nothing is broken. I was just curious about the messages. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos