Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-04 Thread Benjamin Kaduk
On Sat, Mar 03, 2018 at 10:15:10AM -0500, Gary Gatling wrote: > Recently I decided to play around with some alternative architectures on > fedora with virt-manager/qemu. So I set up some power machines. (ppc64 and > ppc64le) > I also made some arm machines but I gather openafs isn't quite ready yet

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Gary Gatling
On Sat, Mar 3, 2018 at 3:46 PM, Harald Barth wrote: > > > Both MIT kinit and heimdal kinit honor the KRB5CCNAME environment > variable which has the form TYPE:location thus a typical way to set > your FILE cache is: > > export KRB5CCNAME=FILE:/tmp/krb5cc_`id -u` > > Btw: As FILE: is the oldest tic

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Harald Barth
> Does heimdal-klist use /etc/krb5.conf or does it use some other > configuration file? I'm worried I did not set up a config file. It should use /etc/krb5.conf as well unless KRB5_CONFIG is set. You should have something like: [libdefaults] default_realm = YOURDOMAIN in there. > [gsg

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Gary Gatling
On Sat, Mar 3, 2018 at 12:14 PM, Harald Barth wrote: > > Hm. If I remember correct, at least parts of the kerberos ticket in > the ticket cache are endian dependent. As the principal name seems to > be broken to start with, maybe the error is there. Do you have the > same problems if you use the

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Harald Barth
Hm. If I remember correct, at least parts of the kerberos ticket in the ticket cache are endian dependent. As the principal name seems to be broken to start with, maybe the error is there. Do you have the same problems if you use the FILE: ticket cache type or the kinit and afslog from heimdal to

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Gary Gatling
On Sat, Mar 3, 2018 at 10:42 AM, Douglas E Engert wrote: > Looks like the hostname is "localhost" on the ppc64. > Did you miss a step? I tried in in another vm that is x86_64 with same krb5.conf. The first time I was using the "parent OS" whch I set the hostname on. Sorry about that... [gsgatl

Re: [OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Douglas E Engert
Looks like the hostname is "localhost" on the ppc64. Did you miss a step? On 3/3/2018 9:15 AM, Gary Gatling wrote: Recently I decided to play around with some alternative architectures on fedora with virt-manager/qemu. So I set up some power machines. (ppc64 and ppc64le) I also made some arm m

[OpenAFS] question about authentication with kerberos and Default principal

2018-03-03 Thread Gary Gatling
Recently I decided to play around with some alternative architectures on fedora with virt-manager/qemu. So I set up some power machines. (ppc64 and ppc64le) I also made some arm machines but I gather openafs isn't quite ready yet for arm in 1.6.22.2. I was able to compile openafs rpms for ppc64.