[1056] in arla-drinkers
Re: forwarding tokens to other machine
daemon@ATHENA.MIT.EDU (Dr A V Le Blanc)
Thu Aug 5 08:50:20 1999
From owner-arla-drinkers@stacken.kth.se Thu Aug 05 12:50:16 1999
Return-Path: <owner-arla-drinkers@stacken.kth.se>
Delivered-To: arla-drinkers-mtg@bloom-picayune.mit.edu
Received: (qmail 11633 invoked from network); 5 Aug 1999 12:50:14 -0000
Received: from unknown (HELO sundance.stacken.kth.se) (130.237.234.41)
by bloom-picayune.mit.edu with SMTP; 5 Aug 1999 12:50:14 -0000
Received: (from majordom@localhost)
by sundance.stacken.kth.se (8.8.8/8.8.8) id OAA06569
for arla-drinkers-list; Thu, 5 Aug 1999 14:43:10 +0200 (MET DST)
Received: from serenity.mcc.ac.uk (serenity.mcc.ac.uk [130.88.200.93])
by sundance.stacken.kth.se (8.8.8/8.8.8) with ESMTP id OAA06542;
Thu, 5 Aug 1999 14:42:25 +0200 (MET DST)
Received: from meissen.mcc.ac.uk ([130.88.203.42])
by serenity.mcc.ac.uk with esmtp (Exim 1.92 #3)
id 11CMqn-000Kst-00; Thu, 5 Aug 1999 13:42:25 +0100
Received: (from zlsiial@localhost)
by meissen.mcc.ac.uk (8.7.6/8.8.4)
id NAA25475; Thu, 5 Aug 1999 13:42:24 +0100 (BST)
Message-ID: <19990805134224.A25471@afs.mcc.ac.uk>
Date: Thu, 5 Aug 1999 13:42:24 +0100
From: Dr A V Le Blanc <LeBlanc@mcc.ac.uk>
To: Assar Westerlund <assar@stacken.kth.se>
Cc: arla-drinkers@stacken.kth.se
Subject: Re: forwarding tokens to other machine
Reply-To: Dr A V Le Blanc <LeBlanc@mcc.ac.uk>
References: <37A84A34.B511D8FD@lrz-muenchen.de> <5loggnl2gb.fsf@assaris.sics.se> <37A938B5.D7DB12E8@lrz-muenchen.de> <19990805100426.B25395@afs.mcc.ac.uk> <5lk8raa5wg.fsf@assaris.sics.se>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.93.1i
In-Reply-To: <5lk8raa5wg.fsf@assaris.sics.se>; from Assar Westerlund on Thu, Aug 05, 1999 at 12:17:03PM +0200
Sender: owner-arla-drinkers@stacken.kth.se
Precedence: bulk
On Thu, Aug 05, 1999 at 12:17:03PM +0200, Assar Westerlund wrote:
> The token format has been compatible for a long time. The misfeature
> that was cause Herbert some troubles was that we didn't implement
> GETTOK properly.
>
> Have you looked at why the forwarding of tokens doesn't work with AFS
> 3.5?
avl0 11:07:32> tokens
Ticket file: /tmp/tkt0_4022221986
Principal: zlsiial@MCC.AC.GB
Issued Expires Principal
Aug 5 09:43:52 Aug 5 19:43:52 krbtgt.MCC.AC.GB@MCC.AC.GB
Aug 5 09:43:53 Aug 5 19:43:53 afs@MCC.AC.GB
AFS tokens:
Aug 5 09:43:53 Aug 5 19:43:53 Tokens for mcc.ac.gb
avl0 13:36:23> ssh -l zlsiial rock
Last login: Thu Aug 5 13:36:01 1999 from snow.mcc.ac.uk
No mail.
Erase is delete
Kill is control-U
rock 13:36:32> tokens
Tokens held by the Cache Manager:
Tokens for afs@mcc.ac.gb [Expires Aug 5 19:43]
--End of list--
ck 13:36:34> cd me
bash: cd: me: Permission denied
rock 13:36:35> klog zlsiial
Password:
rock 13:37:04> cd me
rock 13:37:05> tokens
Tokens held by the Cache Manager:
User's (AFS ID 102) tokens for afs@mcc.ac.gb [Expires Aug 6 15:03]
--End of list--
rock 13:37:07>
The first token is from the arla machine, and works without problems
on AFS 3.4a machines. The ssh on the AFS 3.5 machine is ssh-1.2.26
with the AFS patches, and compiled against krb4-19990219. I also
have with the old tokens:
rock 13:40:43> bos stat rock
bos: failed to contact host's bosserver (security object was passed a bad ticket).
which says that something is wrong. It's hard to find out what's going
wrong inside AFS.
Any suggestions?
-- Owen
LeBlanc@mcc.ac.uk
