Joined: 12 Sep 2002
Location: fr. i. br. (ger)
|Posted: Wed Apr 23, 2003 8:58 pm Post subject: openafs & kerberos V
|maybe this is a completely dumb hint but:
when installing kerberos V, openafs and finally import the afs principal key to the afs server keytab make sure to symlink
/etc/openafs -> /etc/afs
/usr/afs/etc -> /etc/afs
/var/kerberos -> /etc/krb5kdc
/var/lib/krb5kdc -> /etc/krb5kdc
(or any other way round)
which all are all expected to contain the same files.
u could maybe recompile all used binaries with different path flags, this might be overkill tho.
it especially took me a while to figure out whats been wrong with my key version numbers, until i noticed that asetkey list and bos listkeys reported different keys (doh)
whatever -- hth :D
... and use afs 1.2.8, 1.3.2 wont accept your tokens from krb524d (anyway 1.3.x is unavailable atm for some reason (openafs.org))