Lustre kerberos does not look at $KRB5CCNAME. It assumes that your kerberos
ccache is
/etc/krb5cc_N. This problem affects system which uses kerberos
toauthenticate logins.
The system complains with a log error saying that it cannot find a ccache and
the user
cannot accessthe lustre filsystem (permission denied with df or any
attempts for IO).
Workarounds:
-manually run "unset KRB5CCNAME" then "kinit"
-or parse $KRB5CCNAME from FILE:/tmp/XYZ and run "cp /tmp/XYZ
/tmp/krb5cc_N" in login scripts
The ideal solution is for lustre kerberos to have something similar to "afslog"
which will
look at $KRB5CCNAME and put lustre credentials somewhere where the system can
find them.
Kudos to Kevin Sullivan (PSC) for helping to identify the problem and providing
the work-around.
This has been filed in bugzilla.lustre under #20253
-josephine
_______________________________________________
Lustre-discuss mailing list
[email protected]
http://lists.lustre.org/mailman/listinfo/lustre-discuss
