[OpenAFS] AFS + Kerberos

Does anyone know how to circumnavigate this kind of egg/chicken problem? I'm trying to make the kvno for a testuser match the entry in /etc/krb5.keytab and the KeyFile but every time I do so using "ktadd" I have to change the password for the user. As a consequence the kvno gets increased by one

Re: [OpenAFS] 2005-01-17 snapshot: good so far on Fedora Core 2.6.10 kernels

On Wed, Jan 19, 2005 at 12:03:55AM -0500, Derrick J Brashear wrote: > >It's not necessary anymore, basically. The only patch I'm still applying is > >authclient.patch, and that's only because Thomas Chung told me to do it. :) > >

Re: [OpenAFS] 2005-01-17 snapshot: good so far on Fedora Core 2.6.10 kernels

> >Just so I know what to test, is it anticipated that this fixes all previous > >kernel oops reported before as well as all disk cache issues, including > >cache consistency problems? > > One platform-neutral cache consistency issue probably still exists (the > "common" one cured by fs flushv)

Re: [OpenAFS] 2005-01-17 snapshot: good so far on Fedora Core 2.6.10 kernels

On Wed, 19 Jan 2005, Wes Chow wrote: Are these 1.3.x specific issues, or do they exist under 1.2.13 as well? We occasionally see cache consistency problems with 1.2.13, however nothing is really reproducable. I would have guessed 1.3.x, but I can't prove that. _

Re: [OpenAFS] AFS + Kerberos

So If my problem is key mismatch how do I solve it? I mean what do I need to do for the kvno number match the other entries? Thanks, Maurizio On Wed, 2005-01-19 at 10:08, sophana wrote: > If you want that ktadd duplicates a key into a keytab without scrambling > it, it is not possible. > This

Re: [OpenAFS] AFS + Kerberos

I finally managed to get it work. I applied the instructions found at https://lists.openafs.org/pipermail/openafs-devel/2001-November/007220.html and didn't get the "security object was passed a bad ticket" error anymore. I would still get 'Permission denied" when trying to create a file but that

Re: [OpenAFS] where to put NetRestrict?

* Hagbard Celine [2005-01-17 13:51:48 +0100]: > I thought too that /var/lib/openafs was the right guess, but seems > that the Horst suggestion to strace fileserver was wise. > > In fact, from the strace: > > open("/etc/openafs/server-local/NetRestrict", O_RDONLY) = -1 ENOENT (No such > fil > e o

Re: [OpenAFS] network timeouts

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stefaan wrote: | Hi, | | I'm running OpenAFS over a vpn (using vtun), and I've done my very | best to tune the vpn's efficiency, but... Even though the vpn | stays up, during a large file upload I still get Jan 16 02:29:35 | [kernel] afs: Lost contact

[OpenAFS] AFS + Kerberos

Does anyone know how to circumnavigate this kind of egg/chicken problem? I'm trying to make the kvno for a testuser match the entry in /etc/krb5.keytab and the KeyFile but every time I do so using "ktadd" I have to change the password for the user. As a consequence the kvno gets increased by one

Re: [OpenAFS] where to put NetRestrict?

On Mon, 17 Jan 2005, Sergio Gelato wrote: Due to Debian's excessive reluctance to update the stable distribution with new versions of packages, vanilla 3.0r4 still has version 1.2.3 of openafs-fileserver (unchanged since 2002-08-03, and I think there have been security updates since then -- not to

Re: [OpenAFS] AFS + Kerberos

On Tue, 18 Jan 2005, Maurizio Santini wrote: Does anyone know how to circumnavigate this kind of egg/chicken problem? I'm trying to make the kvno for a testuser match the entry in /etc/krb5.keytab and the KeyFile but every time I do so using "ktadd" I have to change the password for the user. As a