Martin MOKREJŠ wrote:
> I'm testing current cvs head against linux-2.6.13 kernel on smp Xeon based
> machine.
> Additionally, I have applied the patch from Troy to improve the cache
> statistics.
> Anyway, I have killed bosserver processes to reboot (I'm installing new cell
> and
> the KeyFile is somehow not picked up again: "ptserver: can't find any
> Kerberos keys, code = 70354689, ignoring").
Well, I found this for my own sidenote:
afs: Tokens for user of AFS id 0 for cell phylo.natur.cuni.cz are discarded
(rxkad error=19270408)
So just for the archives I'll post an answer to this note. The bug is in
heimdals "ktutil copy"
adding md5 version of the key to KeyFile:
phylo ~ # grep 19270408 /usr/afsws/i386_linux26/include/rx/*
/usr/afsws/i386_linux26/include/rx/rxkad.h:#define RXKADUNKNOWNKEY
(19270408L)
phylo ~ # /usr/heimdal/sbin/ktutil -k AFSKEYFILE:/usr/vice/etc/KeyFile list
AFSKEYFILE:/usr/vice/etc/KeyFile:
Vno Type Principal
1 des-cbc-md5 afs/[EMAIL PROTECTED]
phylo ~ #
So, that's the second bug found today in ktutil. Others, beware so that ktutil
required
you to have des-cbc-md5 in krb5.keytab for this step until Love fixed that
today:
/usr/heimdal/sbin/ktutil copy /etc/krb5.keytab AFSKEYFILE:/usr/vice/etc/KeyFile
(which everyone has to pass while establishing a new cell). ;)
_______________________________________________
OpenAFS-devel mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-devel
