[390] in arla-drinkers

home help back first fref pref prev next nref lref last post

Re: klog question

daemon@ATHENA.MIT.EDU (Dr A V Le Blanc)
Fri Nov 13 03:23:27 1998

From owner-arla-drinkers@stacken.kth.se Fri Nov 13 08:23:26 1998
Return-Path: <owner-arla-drinkers@stacken.kth.se>
Delivered-To: arla-drinkers-mtg@bloom-picayune.mit.edu
Received: (qmail 3978 invoked from network); 13 Nov 1998 08:23:25 -0000
Received: from unknown (HELO sundance.stacken.kth.se) (130.237.234.41)
  by bloom-picayune.mit.edu with SMTP; 13 Nov 1998 08:23:25 -0000
Received: (from majordom@localhost)
	by sundance.stacken.kth.se (8.8.8/8.8.8) id JAA18148
	for arla-drinkers-list; Fri, 13 Nov 1998 09:18:18 +0100 (MET)
Received: from serenity.mcc.ac.uk (serenity.mcc.ac.uk [130.88.200.93])
	by sundance.stacken.kth.se (8.8.8/8.8.8) with ESMTP id JAA18140
	for <arla-drinkers@stacken.kth.se>; Fri, 13 Nov 1998 09:18:13 +0100 (MET)
Received: from cguhpc.cgu.mcc.ac.uk ([130.88.201.14] ident=zlsiial)
	by serenity.mcc.ac.uk with esmtp (Exim 1.92 #2)
	for arla-drinkers@stacken.kth.se
	id 0zeEQl-000710-00; Fri, 13 Nov 1998 08:18:11 +0000
Received: (from zlsiial@localhost)
          by cguhpc.cgu.mcc.ac.uk (8.7.6/8.8.4)
	  id IAA06511 for arla-drinkers@stacken.kth.se; Fri, 13 Nov 1998 08:18:06 GMT
Message-ID: <19981113081806.B6491@afs.mcc.ac.uk>
Date: Fri, 13 Nov 1998 08:18:06 +0000
From: Dr A V Le Blanc <LeBlanc@mcc.ac.uk>
To: arla-drinkers@stacken.kth.se
Subject: Re: klog question
Reply-To: Dr A V Le Blanc <LeBlanc@mcc.ac.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.93.1i
Sender: owner-arla-drinkers@stacken.kth.se
Precedence: bulk

Brandon S. Allbery KF8NH <allbery@kf8nh.apk.net> writes:
>The AFS kaserver acts as a Kerberos4 server, so you should set up KTH 
>Kerberos to point to your AFS database servers.  Example for ECE.CMU.EDU 
>(corresponding to AFS cell ece.cmu.edu; except in *very* rare cases, the 
>Kerberos realm will be the upcased AFS cell name):
>
>	ECE.CMU.EDU porok.ece.cmu.edu admin server
>	ECE.CMU.EDU vicio.ece.cmu.edu
>	ECE.CMU.EDU e-xing.ece.cmu.edu
>
>Any of the database servers can be declared the "admin server":  unlike 
>standard Kerberos KDCs, kaserver keeps all database servers in sync 
>automatically.  (KTH kinit/kauth seems to always use the admin server, 
>contrary to documentation; I'm not sure whether this is a bug or not.

Following the advice of Doug Song, I long ago put this in my
/etc/krb.conf:

     MCC.AC.GB
     MCC.AC.GB zeus.mcc.ac.uk admin server
     MCC.AC.GB cfs2.mcc.ac.uk admin server
     MCC.AC.GB cfs1.mcc.ac.uk admin server

and this in /etc/krb.realms:

     mcc.ac.gb       MCC.AC.GB
     .mcc.ac.gb      MCC.AC.GB

I don't know if this fixes all of the problems.  Incidentally, I
don't have a kerberos-iv entry in any of my /etc/services files.

     -- Owen
     LeBlanc@mcc.ac.uk

home help back first fref pref prev next nref lref last post