All:
I've run into a small problem with our openAFS installation. Running
debian sarge and following Russ Allbery's instructions as found on:
http://www.openafs.org/pipermail/openafs-info/2005-August/019061.html,
I have managed to get to the following command this far:
bos status server-name
This results in the error:
bos: failed to contact host's bosserver (security object was passed a
bad ticket).
Below are quite brief details of the initialization:
#: kdestroy ; unlog
#: kinit mustafa.hashmi/admin
Password for mustafa.hashmi/[EMAIL PROTECTED]
# klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: mustafa.hashmi/[EMAIL PROTECTED]
Valid starting Expires Service principal
03/14/06 12:14:02 03/14/06 22:14:01 krbtgt/[EMAIL PROTECTED]
Etype (skey, tkt): Triple DES cbc mode with HMAC/sha1, Triple
DES cbc mode with HMAC/sha1
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
# aklog -d node30.emergen.biz -k EMERGEN.BIZ
Authenticating to cell node30.emergen.biz (server node30.emergen.biz).
We were told to authenticate to realm EMERGEN.BIZ.
Getting tickets: afs/[EMAIL PROTECTED]
About to resolve name mustafa.hashmi.admin to id in cell node30.emergen.biz.
Id 32766
Set username to mustafa.hashmi.admin
Setting tokens. mustafa.hashmi.admin / @ EMERGEN.BIZ
# tokens
Tokens held by the Cache Manager:
Tokens for [EMAIL PROTECTED] [Expires Mar 14 22:14]
--End of list--
The cache manager doesn't seem to be holding any tokens at this point
for my user.
Just to add, the KDC service is on a different server than the
openafs-dbserver, and I have added the REALM as required in
/etc/openafs/server/kdc.conf
Initially I was under the impression the problem was a mismatch in the
kvno number, however, that was just lack of attention on my part when
looking at the output from 'tokens'.
--
A few additional details of interest:
kadmin.local: getprinc afs/node30.emergen.biz
Principal: afs/[EMAIL PROTECTED]
Expiration date: [never]
Last password change: Mon Mar 13 21:25:52 GMT-5 2006
Password expiration date: [none]
Maximum ticket life: 0 days 10:00:00
Maximum renewable life: 7 days 00:00:00
Last modified: Mon Mar 13 21:25:52 GMT-5 2006 (faraz.khan/[EMAIL PROTECTED])
Last successful authentication: [never]
Last failed authentication: [never]
Failed password attempts: 0
Number of keys: 1
Key: vno 3, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]
--
node30:# bos listkeys node30.emergen.biz -localauth
key 3 has cksum 683704053
Keys last changed on Mon Mar 13 21:27:21 2006.
All done.
node30:/usr/share/doc# bos listusers node30.emergen.biz -localauth
SUsers are: mustafa.hashmi/admin rehan.zafar
If someone could please point me in the correct direction, it would be
greatly appreciated.
Thank you and regards,
--
Mustafa A. Hashmi
[EMAIL PROTECTED]
[EMAIL PROTECTED]
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
