Re: aklog: unknown RPC error (-1765328370) while getting AFS tickets

Jose M Calhariz <[email protected]> Wed, 14 Sep 2022 17:57:44 +0100

Newsgroups	gmane.comp.file-systems.openafs.general
Message-ID	<[email protected]>

On Mon, Sep 12, 2022 at 12:12:52PM -0400, Jeffrey E Altman wrote:
> On 9/12/2022 11:49 AM, Jose M Calhariz ([email protected])
> wrote:
> > Todo the setup of the cell I was following the instrtuctions from Debian
> > 9. So I have done:
> > kadmin.local
> > addprinc -randkey -e des-cbc-crc:v4 afs
> > ktadd -k /root/afs.keytab -e des-cbc-crc:v4 afs
> > getprinc afs
> > quit
> 
> There are a couple of things wrong with these directions.
> 
> 1. The service principal that should be created is "afs/<cellname>" not
>    "afs".
> 2. The encryption types that must be added are afs256-cts-hmac-sha1-96
>    and rc4-hmac (if you wish to support Windows clients)
> 

My updated instructions are:

kadmin.local
addprinc -randkey -e aes256-cts-hmac-sha1-96 afs
ktadd -k /root/rxkad.keytab afs
getprinc afs
quit

And submitted a bug report to Debian because I think the problem is
still present on newer versions.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019751



Thank you everyone.

Kind regards
Jose M Calhariz


-- 
--

Os homens não ficam mais espertos com a idade. Apenas perdem mais cabelos

--Preston Sturges

signature.asc (application/pgp-signature, 833 B)