[OpenAFS] Recommended procedure for rotating AFS service keys

2015-11-30 Thread Edgecombe, Jason
Hi everyone, I need to rotate the password/keytab for our AFS service principal. We're using OpenAFS 1.6.15 with rxkad.keytab (no KeyFile) and MIT Kerberos on the KDC. I'm looking for some guidance on how to do that. It looks like the 'ktadd' command in kadmin doesn't allow you to keep old passwo

Re: [OpenAFS] containers / AFS / Ubuntu - stopped working

2015-11-30 Thread Neil Davies
Chas Didn’t get the time to get around to it yesterday, but did today. I can confirm that changing the appropriate line in src/sys/glue.c to open /proc/fs/openafs/afs_ioctl RDONLY works. I used the current ubuntu sources (1.6.7 + PATCHES), built a new version with the patch and installed it i