[33373] in Kerberos
Inittab launching K5start too soon
daemon@ATHENA.MIT.EDU (Jaap Winius)
Wed May 11 20:05:41 2011
Message-ID: <20110512020533.13183zlk22x6d4ys@bitis.umrk.nl>
Date: Thu, 12 May 2011 02:05:33 +0200
From: Jaap Winius <jwinius@umrk.nl>
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi folks,
The Debian squeeze workstations at my site rely on a combination of
Kerberos, OpenLDAP and OpenAFS client software to connect to the
network. It works well enough for me, but the more workstations that
are added the more often there are complaints of login problems
immediately after bootup.
This is caused by k5start being launched from /etc/inittab, so it
begins its attempts to obtain a TGT before the network is available
and does not initially succeed. This leads to problems for many other
processes that are started after the network interface, resulting in a
temporary slew of libnss-ldap related GSSAPI errors (Credentials cache
file '/tmp/krb5cc_0' not found).
I tell the users that they should try waiting a minute before they
attempt to log in, or to reboot if that doesn't work. They always get
in eventually, but I wish I had something more effective to offer.
Any suggestions that might improve this situation would be welcome.
Thanks,
Jaap
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
