[3975] in arla-drinkers
Re: Tokens disappearing on freebsd 5.5
daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Wed Jun 21 13:21:38 2006
From arla-drinkers-bounces@stacken.kth.se Wed Jun 21 17:21:38 2006
Return-Path: <arla-drinkers-bounces@stacken.kth.se>
Delivered-To: arla-drinkers-mtg@bloom-picayune.mit.edu
Received: (qmail 3873 invoked from network); 21 Jun 2006 17:21:38 -0000
Received: from mx2.kth.se (130.237.48.98)
by charon.mit.edu with SMTP; 21 Jun 2006 17:21:38 -0000
Received: from localhost (localhost.localdomain [127.0.0.1])
by mx2.kth.se (Postfix) with ESMTP id 451E11427F4;
Wed, 21 Jun 2006 19:21:36 +0200 (CEST)
Received: from mx2.kth.se ([127.0.0.1])
by localhost (mx2.kth.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP
id 11700-01-35; Wed, 21 Jun 2006 19:21:34 +0200 (CEST)
Received: from tapas.stacken.kth.se (tapas.stacken.kth.se [130.237.234.140])
by mx2.kth.se (Postfix) with ESMTP id CD59C140DD8;
Wed, 21 Jun 2006 19:21:33 +0200 (CEST)
Received: from tapas.stacken.kth.se (localhost [127.0.0.1])
by tapas.stacken.kth.se (Postfix) with ESMTP id 4B111534FC;
Wed, 21 Jun 2006 19:21:33 +0200 (CEST)
X-Original-To: arla-drinkers@tapas.stacken.kth.se
Delivered-To: arla-drinkers@tapas.stacken.kth.se
Received: from brev.stacken.kth.se (brev.stacken.kth.se [130.237.234.84])
by tapas.stacken.kth.se (Postfix) with ESMTP id D6D6A534FC
for <arla-drinkers@tapas.stacken.kth.se>;
Wed, 21 Jun 2006 19:21:30 +0200 (CEST)
Received: from mx1.kth.se (mx1.kth.se [130.237.32.140])
by brev.stacken.kth.se (8.12.10/8.12.10) with ESMTP id k5LHLUAr016131
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 19:21:30 +0200 (MET DST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mx1.kth.se (Postfix) with ESMTP id E3315141BAA
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 19:21:29 +0200 (CEST)
Received: from mx1.kth.se ([127.0.0.1])
by localhost (mx1.kth.se [127.0.0.1]) (amavisd-new,
port 10024) with LMTP
id 15372-01-51 for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 19:21:28 +0200 (CEST)
Received: from nmta3.jpl.nasa.gov (nmta3.jpl.nasa.gov [137.78.160.108])
by mx1.kth.se (Postfix) with ESMTP id 5A2D6141B95
for <arla-drinkers@stacken.kth.se>;
Wed, 21 Jun 2006 19:21:27 +0200 (CEST)
Received: from xmta2.jpl.nasa.gov (xmta2.jpl.nasa.gov [137.78.160.56])
by nmta3.jpl.nasa.gov (Switch-3.1.8/Switch-3.1.7) with ESMTP id
k5LHLOwM018314; Wed, 21 Jun 2006 10:21:24 -0700
Received: from [128.149.196.254] (dhcp-149-196-254.jpl.nasa.gov
[128.149.196.254])
by xmta2.jpl.nasa.gov (Switch-3.1.8/Switch-3.1.7) with ESMTP id
k5LHLKdf022699; Wed, 21 Jun 2006 10:21:24 -0700
In-Reply-To: <9aa9fc180606210921r78862638o93871fb3a0dc376e@mail.gmail.com>
References: <9aa9fc180606140000s2bb46a5emc840a9a710a3c1b@mail.gmail.com>
<lsr4pynj2kb.fsf@kashyyyk.ite.kth.se>
<20060614.164901.69219629.haba@habarber.pdc.kth.se>
<9aa9fc180606141600t577ba1eekec1fb58242a96b68@mail.gmail.com>
<9aa9fc180606142357q5e208e1rf7517cfabb4e0ed9@mail.gmail.com>
<9aa9fc180606150917p35a90255q26eaae7536e4f9fc@mail.gmail.com>
<m2odwumg4t.fsf@nutcracker-2.local>
<9aa9fc180606151610o343a1d0fo8820b26fa15fdef9@mail.gmail.com>
<9aa9fc180606210132i55190e8dsc5ea838883e2e589@mail.gmail.com>
<lsry7vqeh09.fsf@kashyyyk.ite.kth.se>
<9aa9fc180606210921r78862638o93871fb3a0dc376e@mail.gmail.com>
Mime-Version: 1.0 (Apple Message framework v750)
Message-Id: <E982E529-F027-42B7-8B46-6DF40FA8D4DA@jpl.nasa.gov>
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Subject: Re: Tokens disappearing on freebsd 5.5
Date: Wed, 21 Jun 2006 10:21:17 -0700
To: "Scott Peshak" <speshak@iastate.edu>
X-Mailer: Apple Mail (2.750)
X-Source-IP: dhcp-149-196-254.jpl.nasa.gov [128.149.196.254]
X-Source-Sender: hotz@jpl.nasa.gov
X-AUTH: Internal IP
X-Virus-Scanned: by amavisd-new at kth.se
X-Spam-Status: No, hits=-4.7 tagged_above=-200.0 required=5.0 tests=BAYES_00,
RM_bp_IfYouNeed
X-Spam-Level:
Cc: arla-drinkers@stacken.kth.se, Tomas Olsson <tol@stacken.kth.se>
X-BeenThere: arla-drinkers@stacken.kth.se
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: Arla discussions <arla-drinkers.stacken.kth.se>
List-Unsubscribe: <https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers>,
<mailto:arla-drinkers-request@stacken.kth.se?subject=unsubscribe>
List-Archive: <http://lists.stacken.kth.se/pipermail/arla-drinkers>
List-Post: <mailto:arla-drinkers@stacken.kth.se>
List-Help: <mailto:arla-drinkers-request@stacken.kth.se?subject=help>
List-Subscribe: <https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers>,
<mailto:arla-drinkers-request@stacken.kth.se?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: arla-drinkers-bounces@stacken.kth.se
Errors-To: arla-drinkers-bounces@stacken.kth.se
X-Virus-Scanned: by amavisd-new at kth.se
On Jun 21, 2006, at 9:21 AM, Scott Peshak wrote:
> On 21 Jun 2006 16:10:46 +0200, Tomas Olsson <tol@stacken.kth.se>
> wrote:
>
>> Could you check what tickets and kvno your fileserver uses? Also,
>> it would
>> be interesting to see klist -v from your host and compare it to
>> what it
>> looks like on a client with working authenticated access.
>>
> Server: afs@RANDOMSCREWS.NET
> Ticket etype: des-cbc-crc, kvno 1
> Auth time: Jun 21 11:15:12 2006
> End time: Jun 21 21:15:12 2006
> Ticket flags: transited-policy-checked
> Addresses: IPv4:10.0.0.1
>
> Server: afs/randomscrews.net@RANDOMSCREWS.NET
> Ticket etype: des-cbc-crc, kvno 1
> Auth time: Jun 21 11:15:12 2006
> End time: Jun 21 21:15:12 2006
> Ticket flags: transited-policy-checked
> Addresses: IPv4:10.0.0.1
>
>
> My fileservers use the afs/randomscrews.net@RANDOMSCREWS.NET key in
> the keyfile, per the instructions i found here:
> http://kula.public.iastate.edu/talks/afs-bpw-2005/afs-bpw-2005-
> iowa.html
Are the keys of those two principals the same? If you know that the
latter is what's used, then can you delete the former from the KDC?
Note that the AFS keyfile can't represent both of those keys unless
they have different kvno's. If you need both principals, then rev
one of them so you can put both in the keyfile.
------------------------------------------------------------------------
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
_______________________________________________
Arla-drinkers mailing list
Arla-drinkers@stacken.kth.se
https://lists.stacken.kth.se/mailman/listinfo/arla-drinkers
