On Mon, 11 Jul 2011 17:31:30 -0400 "Danko Antolovic" <danto...@indiana.edu> wrote:
> The Open AFS configuration knows only about RESOURCE.NET, which is the > default (and only) Kerb domain in /etc/krb5.conf, and is also the > domain listed in /usr/afs/etc/krb.conf. If I'm understanding your setup correctly, I'd think you want the IU.EDU realm in krb.conf. You want 'u...@iu.edu' to be 'user' to AFS, right? Then you want IU.EDU to be considered a local realm, and so you want it in krb.conf. You can get some more information about what's going on with name mapping if you raise the fileserver debug level and/or turn on audit logs. The fileserver manpage should have enough to let you know how (look for mentions of TSTP and HUP for how to change the debug level on the fly; you probably want to turn it up to at least 5). I'd expect right now what you'd see is that u...@iu.edu is being considered a foreign user; so the fileserver thinks they are 'u...@iu.edu' instead of 'user'. -- Andrew Deason adea...@sinenomine.net _______________________________________________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info