RE: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Danko Antolovic
penafs.org/Reference/8/asetkey.html Thanks again for the help. Danko Antolovic -Original Message- From: Jeffrey Altman [mailto:jalt...@secure-endpoints.com] Sent: Tuesday, April 12, 2011 1:21 PM To: Danko Antolovic Subject: Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Jeffrey Altman
On 4/12/2011 11:18 AM, Simon Wilkinson wrote: > > On 12 Apr 2011, at 16:09, Jeffrey Altman wrote: > >> If the kvno you generated is 8, then the keno you ask asetkey to add must >> also be 8. > > The principal was added with kvno 8, but then the 'ktadd' incremented that > number by 1 one when i

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Simon Wilkinson
On 12 Apr 2011, at 16:41, Danko Antolovic wrote: > I have the encryption des-cbc-md5 in three other AFS-related keytabs, which > asetkey has been able to process. > > Is there a way to narrow down the meaning/origin of that error? Well, the error is KRB5_KT_NOTFOUND, which means pretty much

RE: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Danko Antolovic
, April 12, 2011 11:09 AM To: Danko Antolovic Cc: Subject: Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key If the kvno you generated is 8, then the keno you ask asetkey to add must also be 8. Sent from my iPad On Apr 12, 2011, at 11:01 AM, "

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Simon Wilkinson
On 12 Apr 2011, at 16:09, Jeffrey Altman wrote: > If the kvno you generated is 8, then the keno you ask asetkey to add must > also be 8. The principal was added with kvno 8, but then the 'ktadd' incremented that number by 1 one when it regenerated the key to create the keytab. klist shows the

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Jeffrey Altman
If the kvno you generated is 8, then the keno you ask asetkey to add must also be 8. Sent from my iPad On Apr 12, 2011, at 11:01 AM, "Danko Antolovic" wrote: > Hello, > > here is my problem: I have a nicely functional AFS server, cell name > afs1.bedrock.iu.edu, authenticating against an AD

[OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2011-04-12 Thread Danko Antolovic
Hello, here is my problem: I have a nicely functional AFS server, cell name afs1.bedrock.iu.edu, authenticating against an AD realm. I want to give it a second authentication realm, a Kerberos 5, named KDC.DANTOLOV.UITS.INDIANA.EDU. All of this is under RHEL 5. On the KDC machine, I made t

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2010-10-30 Thread Lars Schimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-10-30 13:02, Lars Schimmer wrote: > Hi! > > Trying to setup new AD 2008R2 now. Trying a bit more with options and looks like: ktpass -out C:\afskey.out.txt -princ afs/cgv.tugraz...@cgv.tugraz.at - -mapuser a...@cgv.tugraz.at -mapOp add -cryp

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2010-10-30 Thread Lars Schimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010-10-30 13:11, Simon Wilkinson wrote: > > On 30 Oct 2010, at 12:02, Lars Schimmer wrote: >> >> asetkey add 1 /tmp/afs-keytab afs/cgv.tugraz.at >> asetkey: unknown RPC error (-1765328203) while extracting AFS service key > > I think that error (

Re: [OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2010-10-30 Thread Simon Wilkinson
On 30 Oct 2010, at 12:02, Lars Schimmer wrote: > > asetkey add 1 /tmp/afs-keytab afs/cgv.tugraz.at > asetkey: unknown RPC error (-1765328203) while extracting AFS service key I think that error (181 in the Kerberos 5 error table) is kt entry not found. What does klist -k say about the contents

[OpenAFS] asetkey: unknown RPC error (-1765328203) while extracting AFS service key

2010-10-30 Thread Lars Schimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Trying to setup new AD 2008R2 now. And I get this error: asetkey: unknown RPC error (-1765328203) while extracting AFS service key I did so far on Windows 2008R2 64bit: - -create your afs user in AD (username afs, user cannot change password, p