[OpenAFS] cross realm

2016-06-17 Thread zhaoxy299
Hi, I want to create Cross-Realm Trust between two Active Directory domains,but I can not find any documents about Cross-Realm Trust on windows kdc, can you give me some tips?

[OpenAFS] openafs can not delete file

2016-06-01 Thread zhaoxy299
hi, the openafs has been successfully installed ,but i have met some problems. in one of my dir ,i have some files and dirs,use the ll command like this [cai@test-afs002 home]$ kdestroy [cai@test-afs002 home]$ kinit cai Password for c...@pc.com: [cai@test-afs002 home]$ aklog [cai@test-afs002 home

Re: RE: Re: Re: RE: [OpenAFS] ad+openafs

2016-05-13 Thread zhaoxy299
hi, ktpass -princ afs/pc@pc.com -mapuser t...@pc.com -mapOp add -out afs.keytab +rndPass -crypto DES-CBC-CRC +DesOnly -ptype KRB5_NT_PRINCIPAL +DumpSalt i use the ktpass command to create afs.keytab on windows ad and then copy the afs.keytab file to the openafs server,after that

Re: Re: Re: RE: [OpenAFS] ad+openafs

2016-05-13 Thread zhaoxy299
hi, sorry,i need to add something . i have three servers. ad +kerberos win2008 nis server openafs server linux redhat 6.7 nis slave openafs client linux redhat 6.7 i can use the ad accounts to login the linux server and can get tokens.but the pam configuration with pam_krb5 seems not wor

Re: Re: RE: [OpenAFS] ad+openafs

2016-05-13 Thread zhaoxy299
hi, i modified the /etc/pam.d/system-auth file ,but it did not work,how can i debug this error?Are there any other files that need to be modified? root@test-afs002 cai]# vi /etc/pam.d/system-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is

[OpenAFS] ad+openafs

2016-05-03 Thread zhaoxy299
hi i install openafs1.6.14 on redhat 6.7 and i want to use the ad as krb5 auth . here is my steps: 1 install openafs1.6.14 on redhat6.7 2 install ad on windows 2008 r2 3 ktpass -princ afs/cellname@ADDOMAINNAME -mapuser afscell@ADDOMAINNAME \ -mapOp add -out afs-keytab +rndPass -crypto DES-