[3973] in arla-drinkers
Re: Tokens disappearing on freebsd 5.5
daemon@ATHENA.MIT.EDU (Scott Peshak)
Wed Jun 21 12:40:35 2006
From arla-drinkers-bounces@stacken.kth.se Wed Jun 21 16:40:35 2006
Return-Path: <arla-drinkers-bounces@stacken.kth.se>
Delivered-To: arla-drinkers-mtg@bloom-picayune.mit.edu
Received: (qmail 2035 invoked from network); 21 Jun 2006 16:40:34 -0000
Received: from mx3.kth.se (130.237.48.97)
by charon.mit.edu with SMTP; 21 Jun 2006 16:40:34 -0000
Received: from localhost (localhost.localdomain [127.0.0.1])
by mx3.kth.se (Postfix) with ESMTP id C0B1014104E;
Wed, 21 Jun 2006 18:40:32 +0200 (CEST)
Received: from mx3.kth.se ([127.0.0.1])
by localhost (mx3.kth.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP
id 27263-01-44; Wed, 21 Jun 2006 18:40:31 +0200 (CEST)
Received: from tapas.stacken.kth.se (tapas.stacken.kth.se [130.237.234.140])
by mx3.kth.se (Postfix) with ESMTP id 10B1D1405D2;
Wed, 21 Jun 2006 18:40:31 +0200 (CEST)
Received: from tapas.stacken.kth.se (localhost [127.0.0.1])
by tapas.stacken.kth.se (Postfix) with ESMTP id 75975534FC;
Wed, 21 Jun 2006 18:40:30 +0200 (CEST)
X-Original-To: arla-drinkers@tapas.stacken.kth.se
Delivered-To: arla-drinkers@tapas.stacken.kth.se
Received: from brev.stacken.kth.se (brev.stacken.kth.se [130.237.234.84])
by tapas.stacken.kth.se (Postfix) with ESMTP id CCF7B534FC
for <arla-drinkers@tapas.stacken.kth.se>;
Wed, 21 Jun 2006 18:40:28 +0200 (CEST)
Received: from mx3.kth.se (mx3.kth.se [130.237.48.97])
by brev.stacken.kth.se (8.12.10/8.12.10) with ESMTP id k5LGeSAr015760
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 18:40:28 +0200 (MET DST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mx3.kth.se (Postfix) with ESMTP id EF755141025
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 18:40:27 +0200 (CEST)
Received: from mx3.kth.se ([127.0.0.1])
by localhost (mx3.kth.se [127.0.0.1]) (amavisd-new,
port 10024) with LMTP
id 20384-02-44 for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 18:40:26 +0200 (CEST)
Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.184])
by mx3.kth.se (Postfix) with ESMTP id 989E114101A
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 18:40:26 +0200 (CEST)
Received: by nf-out-0910.google.com with SMTP id y25so130255nfb
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 09:40:26 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
b=CJMrJ6kMx6CQNQGDXLkBdlwzOfLUbTbDqbmgi5jWW9AQl3ypE9qAxwSX9o36uYJ5+1gSMt++cHPiMBlTlj/Ne8gVdR/gx+K7oh/d2qLkw2vYkrfJjHlWr3izfTgMUZE9jliypq2u4N0fPF7VWqxL5TYWBdrz9VAaZRa2V0g0IoY=
Received: by 10.49.19.11 with SMTP id w11mr729273nfi;
Wed, 21 Jun 2006 09:21:34 -0700 (PDT)
Received: by 10.66.222.15 with HTTP; Wed, 21 Jun 2006 09:21:34 -0700 (PDT)
Message-ID: <9aa9fc180606210921r78862638o93871fb3a0dc376e@mail.gmail.com>
Date: Wed, 21 Jun 2006 11:21:34 -0500
From: "Scott Peshak" <speshak@iastate.edu>
To: "Tomas Olsson" <tol@stacken.kth.se>
Subject: Re: Tokens disappearing on freebsd 5.5
In-Reply-To: <lsry7vqeh09.fsf@kashyyyk.ite.kth.se>
MIME-Version: 1.0
Content-Disposition: inline
References: <9aa9fc180606140000s2bb46a5emc840a9a710a3c1b@mail.gmail.com>
<lsr4pynj2kb.fsf@kashyyyk.ite.kth.se>
<20060614.164901.69219629.haba@habarber.pdc.kth.se>
<9aa9fc180606141600t577ba1eekec1fb58242a96b68@mail.gmail.com>
<9aa9fc180606142357q5e208e1rf7517cfabb4e0ed9@mail.gmail.com>
<9aa9fc180606150917p35a90255q26eaae7536e4f9fc@mail.gmail.com>
<m2odwumg4t.fsf@nutcracker-2.local>
<9aa9fc180606151610o343a1d0fo8820b26fa15fdef9@mail.gmail.com>
<9aa9fc180606210132i55190e8dsc5ea838883e2e589@mail.gmail.com>
<lsry7vqeh09.fsf@kashyyyk.ite.kth.se>
X-Google-Sender-Auth: 6f2fa5a853589166
X-Virus-Scanned: by amavisd-new at kth.se
X-Spam-Status: No, hits=-4.9 tagged_above=-200.0 required=5.0 tests=BAYES_00
X-Spam-Level:
Cc: arla-drinkers@stacken.kth.se
X-BeenThere: arla-drinkers@stacken.kth.se
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: Arla discussions <arla-drinkers.stacken.kth.se>
List-Unsubscribe: <https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers>,
<mailto:arla-drinkers-request@stacken.kth.se?subject=unsubscribe>
List-Archive: <http://lists.stacken.kth.se/pipermail/arla-drinkers>
List-Post: <mailto:arla-drinkers@stacken.kth.se>
List-Help: <mailto:arla-drinkers-request@stacken.kth.se?subject=help>
List-Subscribe: <https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers>,
<mailto:arla-drinkers-request@stacken.kth.se?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: arla-drinkers-bounces@stacken.kth.se
Errors-To: arla-drinkers-bounces@stacken.kth.se
X-Virus-Scanned: by amavisd-new at kth.se
On 21 Jun 2006 16:10:46 +0200, Tomas Olsson <tol@stacken.kth.se> wrote:
> Could you check what tickets and kvno your fileserver uses? Also, it would
> be interesting to see klist -v from your host and compare it to what it
> looks like on a client with working authenticated access.
>
on the non-working fbsd box:
klist -v
Credentials cache: FILE:/tmp/krb5cc_0
Principal: speshak@RANDOMSCREWS.NET
Cache version: 4
Server: krbtgt/RANDOMSCREWS.NET@RANDOMSCREWS.NET
Ticket etype: des3-cbc-sha1, kvno 1
Auth time: Jun 21 11:13:39 2006
End time: Jun 21 21:13:38 2006
Renew till: Jul 21 11:13:38 2006
Ticket flags: renewable, initial
Addresses: IPv4:10.0.0.230
Server: afs@RANDOMSCREWS.NET
Ticket etype: des-cbc-crc, kvno 1
Auth time: Jun 21 11:13:39 2006
End time: Jun 21 21:13:38 2006
Ticket flags: transited-policy-checked
Addresses: IPv4:10.0.0.230
On a linux machine that works (using openafs client)
klist -v
Credentials cache: FILE:/tmp/krb5cc_0
Principal: speshak@RANDOMSCREWS.NET
Cache version: 4
Server: krbtgt/RANDOMSCREWS.NET@RANDOMSCREWS.NET
Ticket etype: aes256-cts-hmac-sha1-96, kvno 1
Auth time: Jun 21 11:15:12 2006
End time: Jun 21 21:15:12 2006
Ticket flags: initial
Addresses: IPv4:10.0.0.1
Server: afs@RANDOMSCREWS.NET
Ticket etype: des-cbc-crc, kvno 1
Auth time: Jun 21 11:15:12 2006
End time: Jun 21 21:15:12 2006
Ticket flags: transited-policy-checked
Addresses: IPv4:10.0.0.1
Server: afs/randomscrews.net@RANDOMSCREWS.NET
Ticket etype: des-cbc-crc, kvno 1
Auth time: Jun 21 11:15:12 2006
End time: Jun 21 21:15:12 2006
Ticket flags: transited-policy-checked
Addresses: IPv4:10.0.0.1
My fileservers use the afs/randomscrews.net@RANDOMSCREWS.NET key in
the keyfile, per the instructions i found here:
http://kula.public.iastate.edu/talks/afs-bpw-2005/afs-bpw-2005-iowa.html
Scott
_______________________________________________
Arla-drinkers mailing list
Arla-drinkers@stacken.kth.se
https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers