The following commit has been merged in the openafs-stable-1_8_x branch:
commit 0ef2427d12bb3c07a6dd66ac07bbfe958871e8d4
Author: Michael Meffie <[email protected]>
Date: Fri Oct 18 13:43:36 2019 -0400
warn when starting without keys
The server processes will happily start without keys and then fail all
authenticated access, including database synchronization and local
commands with -localauth. At least issue warnings to let admins know
the keys are missing and that akeyconvert or asetkey needs to be run.
The situation is not helped by fact the filenames of the key files have
changed between versions. In 1.6.x the (non-DES) keys were in the
rxkad.keytab file and in later versions they are in the KeyFile* files,
so if you are used to 1.6.x it is not obvious what is wrong.
Reviewed-on: https://gerrit.openafs.org/13911
Reviewed-by: Andrew Deason <[email protected]>
Reviewed-by: Cheyenne Wills <[email protected]>
Reviewed-by: Benjamin Kaduk <[email protected]>
Tested-by: BuildBot <[email protected]>
(cherry picked from commit 042f809ccfe12bafed73aa4eb4db2c86737e0b22)
Change-Id: I280d3c83b4576684f2035f79d94966bc5a174681
Reviewed-on: https://gerrit.openafs.org/14594
Reviewed-by: Mark Vitale <[email protected]>
Reviewed-by: Cheyenne Wills <[email protected]>
Reviewed-by: Michael Meffie <[email protected]>
Tested-by: BuildBot <[email protected]>
Reviewed-by: Andrew Deason <[email protected]>
Reviewed-by: Marcio Brito Barbosa <[email protected]>
Reviewed-by: Stephan Wiesand <[email protected]>
src/auth/cellconfig.p.h | 1 +
src/auth/keys.c | 43 +++++++++++++++++++++++++++++++---------
src/auth/liboafs_auth.la.sym | 1 +
src/bozo/bosserver.c | 6 ++++++
src/budb/server.c | 6 ++++++
src/butc/tcmain.c | 6 ++++++
src/libafsauthent/afsauthent.def | 1 +
src/ptserver/ptserver.c | 6 +++++-
src/update/server.c | 6 ++++++
src/viced/viced.c | 7 ++++++-
src/vlserver/vlserver.c | 6 +++++-
src/volser/volmain.c | 6 +++++-
12 files changed, 82 insertions(+), 13 deletions(-)
--
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs
