When using aklog (OpenAFS-1.6.6) on OS X 10.9.4 without an AFS service
principal in the ticket cache, e.g.
# klist
Credentials cache: API:F46BD8F1-7C3C-43F9-835B-9D9692183AC2
Principal: m...@informatik.uni-tuebingen.de
Issued Expires Principal
Jul 31 10:47:31 2014 Aug 1 11:47:31 2014
krbtgt/informatik.uni-tuebingen...@informatik.uni-tuebingen.de
aklog fails:
# aklog -d
Authenticating to cell informatik.uni-tuebingen.de (server
afsdb1.informatik.uni-tuebingen.de).
Trying to authenticate to user's realm INFORMATIK.UNI-TUEBINGEN.DE.
Getting tickets: afs/informatik.uni-tuebingen...@informatik.uni-tuebingen.de
We've deduced that we need to authenticate to realm
INFORMATIK.UNI-TUEBINGEN.DE.
Getting tickets: afs/informatik.uni-tuebingen...@informatik.uni-tuebingen.de
Getting tickets: afs/informatik.uni-tuebingen...@informatik.uni-tuebingen.de
Getting tickets: a...@informatik.uni-tuebingen.de
Kerberos error code returned by get_cred : -1765328324
aklog: Couldn't get informatik.uni-tuebingen.de AFS tickets:
aklog: unknown RPC error (-1765328324) while getting AFS tickets
According to aklog's debugging output above, aklog tries to obtain AFS
service tickets from the KDC. But we do not see any connection attempt
in our KDC's log file from aklog on OS X. (We do see that aklog
successfully asks and receives tickets from the KDC on our Linux
machines, for example.)
When we already have an AFS service principal in the ticket cache, aklog
works fine.
Why does aklog on OS X not try to obtain tickets from the KDC? Is this
a known issue? Or is this a problem in our setup?
Thanks for your help!
--
Marcus
_______________________________________________
OpenAFS-devel mailing list
OpenAFS-devel@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-devel
