I just notoced that I forgot to empty the token cache before running the
aklog.
This is the result for aklog with an empty token cache:
b...@krb5-server:~$ aklog -d -c kuk.adm.es.aau.dk -c bai.adm.es.aau.dk
Authenticating to cell kuk.adm.es.aau.dk (server afsdb1.kuk.adm.es.aau.dk).
Trying to authenticate to user's realm BAI.ADM.ES.AAU.DK.
Getting tickets: afs/[email protected]
We've deduced that we need to authenticate using referrals.
Getting tickets: afs/kuk.adm.es.aau.dk@
We've deduced that we need to authenticate to realm KUK.ADM.ES.AAU.DK.
Getting tickets: afs/[email protected]
Getting tickets: [email protected]
Kerberos error code returned by get_cred : -1765328377
aklog: Couldn't get kuk.adm.es.aau.dk AFS tickets:
aklog: unknown RPC error (-1765328377) while getting AFS tickets
Authenticating to cell bai.adm.es.aau.dk (server
krb5-afsdb1.bai.adm.es.aau.dk).
Trying to authenticate to user's realm BAI.ADM.ES.AAU.DK.
Getting tickets: afs/[email protected]
We've deduced that we need to authenticate using referrals.
Getting tickets: afs/bai.adm.es.aau.dk@
We've deduced that we need to authenticate to realm BAI.ADM.ES.AAU.DK.
Getting tickets: afs/[email protected]
Getting tickets: [email protected]
Using Kerberos V5 ticket natively
About to resolve name bai to id in cell bai.adm.es.aau.dk.
Id 1000
Set username to AFS ID 1000
Setting tokens. AFS ID 1000 / @ BAI.ADM.ES.AAU.DK
/Bo Bai
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
