Re: aklog: unknown RPC error (-1765328370) while getting AFS tickets

Jose M Calhariz <[email protected]> Wed, 14 Sep 2022 19:17:43 +0100

Newsgroups	gmane.comp.file-systems.openafs.general
Message-ID	<[email protected]>

On Wed, Sep 14, 2022 at 02:00:02PM -0400, Jeffrey E Altman wrote:
> On 9/14/2022 12:57 PM, Jose M Calhariz ([email protected])
> wrote:
> > 
> > My updated instructions are:
> > 
> > kadmin.local
> > addprinc -randkey -e aes256-cts-hmac-sha1-96 afs
> > ktadd -k /root/rxkad.keytab afs
> > getprinc afs
> > quit
> 
> If your cell name is "your-cell-name.com" then these need to be
> 
> addprinc -randkey -e aes256-cts-hmac-sha1-96 afs/your-cell-name.com
> ktadd -k /root/rxkad.keytab afs/your-cell-name.com
> 
> The use of "afs@REALM" is ambiguous in environment where there are multiple cells authenticated by a single REALM.
>

Good to know, in my case I am setting up new kerberos realm and new
OpenAFS cells just for testing.  This ambiguos afs principal is good
for me, but maybe not enough for other people.



> Jeffrey Altman
> 
> 

Kind regards
Jose M Calhariz


-- 
--

Os homens não ficam mais espertos com a idade. Apenas perdem mais cabelos

--Preston Sturges

signature.asc (application/pgp-signature, 833 B)