[30272] in Kerberos

home help back first fref pref prev next nref lref last post

Re: AFP not working for cross realm

daemon@ATHENA.MIT.EDU (Ken Hornstein)
Mon Sep 8 10:20:17 2008

Message-Id: <200809081407.m88E7D7p010817@hedwig.cmf.nrl.navy.mil>
To: Abhishek Chowdhury <abhishek.brave@gmail.com>
In-Reply-To: <19370052.post@talk.nabble.com> 
Date: Mon, 08 Sep 2008 10:07:13 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Cc: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

>I have configured AFP for kerberized authentication. It is working fine with
>simple kerberos authentication,but with cross ream i am not able to mount
>using the command 
>
>mount_afp afp://user1@aca.com/test1 /test2
>i am getting all the cross realm ticktes and the service ticktes and  I have
>verified the kvno off all the principals , everything is correct.
>
>The error is 
>AFPMountURL returned error -5019,error is -5019

If you're getting the cross-realm tickets, I am _guessing_ that the issue
is one of authorization - your cross-realm identity isn't allowed to mount
that particular filesystem.  That is a guess.  And if that is the problem,
I have no idea how to fix it.

--Ken
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post