Re: Help setting up openafs on debian bookworm

Dirk Heinrichs <[email protected]> Sun, 2 Jun 2024 10:15:04 +0200

Newsgroups	gmane.comp.file-systems.openafs.general
Message-ID	<[email protected]>

Ernesto Alfonso:

> sudo asetkey list
>     rxkad_krb5      kvno    5 enctype 17; key is: 
> ????????????????????????????????
>     rxkad_krb5      kvno    5 enctype 18; key is: 
> ????????????????????????????????????????????????????????????????
>     rxkad_krb5      kvno    9 enctype 17; key is: 
> ????????????????????????????????
>     rxkad_krb5      kvno    9 enctype 18; key is: 
> ????????????????????????????????????????????????????????????????

I'm a little bit confused about the key version numbers (kvno). They 
should IMHO be the same. Are those question marks the same string for 
the respective enctypes? You could also check the content of your 
keytab, by running "ktutil". In ktutil, read your keytab file using "rkt 
/etc/openafs/server/rxkad.keytab" and then list the keys using the "l" 
(lowercase "L") command. It should list multiple keys, which all have 
the same kvno. If not delete the ones with the lower kvno's, using 
"delent <slot number>" and save the file using "wkt 
/etc/openafs/server/rxkad.keytab".

HTH...

     Dirk

-- 
Dirk Heinrichs <[email protected]>
Matrix-Adresse: @heini:chat.altum.de
GPG Public Key: 80F1540E03A3968F3D79C382853C32C427B48049
Privacy Handbuch: https://www.privacy-handbuch.de

OpenPGP_signature.asc (application/pgp-signature, 228 B)