Harald Barth wrote:
What does "restarting openafs" mean?  Did you restart the client system or 
the fileserver?
    

Client.

  
Yeah, but the server will still return RXKADUNKNOWNKEY if the real kvno in 
the krb5 ticket isn't one for which it can look up a key.
    

I don't know how the kvno could be broken because the tickets uhm - worked.
Unfortunately I don't have any copy of the tickets/tokens left to examine.

Harald.

.

  
Examine the capture you took yesterday when things were not working. 
Look for the AFS kvno in one of the messages from the client to the server.
Since you are using some varient of the Kerberos 5 based tokens, the kvno
should always be reported as 213 or 256.   If it is anything else, then the
client is confused. 

Jeffrey Altman


begin:vcard
fn:Jeffrey Altman
n:Altman;Jeffrey
org:Secure Endpoints Inc.
adr:;;255 W 94TH ST PHB;NEW YORK;NY;10025;United States
email;internet:[EMAIL PROTECTED]
title:President
tel;work:+1 212 769-9018
x-mozilla-html:TRUE
url:http://www.secure-endpoints.com
version:2.1
end:vcard

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to