This AM I was getting ticket requests from [EMAIL PROTECTED], so kinit
admin;afslog -ctedcell; fixed that.

Bos listkeys shemya gives an error: "ticket returned unknown key version
number encountered while listing keys"

Looking at ethereal there is a:
 BOS server request (Bos-> afs3-bos port)
 Challenge              (afs3-bos -> bos port)
 Response               (Bos-> afs3-bos port)
 Abort          (afs3-bos -> bos port)

kdc.log is:

2003-12-27T09:09:20 AS-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for
krbtgt/[EMAIL PROTECTED]
2003-12-27T09:09:20 Using des-cbc-md5/des3-cbc-sha1
2003-12-27T09:09:20 sending 614 bytes to IPv4:10.1.1.116
2003-12-27T09:09:20 TGS-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for
afs/[EMAIL PROTECTED]
2003-12-27T09:09:20 sending 532 bytes to IPv4:10.1.1.116
2003-12-27T09:09:20 524-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for
afs/[EMAIL PROTECTED]
2003-12-27T09:09:20 sending 1266 bytes to IPv4:10.1.1.116
2003-12-27T09:09:29 524-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for
afs/[EMAIL PROTECTED]
2003-12-27T09:09:29 sending 1266 bytes to IPv4:10.1.1.116
shemya:/var/log/openafs # kadmin -l
kadmin> list *
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  afs/[EMAIL PROTECTED]
  admin/[EMAIL PROTECTED]
  kadmin/[EMAIL PROTECTED]
  kadmin/[EMAIL PROTECTED]
  kadmin/[EMAIL PROTECTED]
  changepw/[EMAIL PROTECTED]
  krbtgt/[EMAIL PROTECTED]
  host/[EMAIL PROTECTED]

Could the problem be in the mapping of afs/[EMAIL PROTECTED] in krb5 to
afs in AFS or the 1266 byte length returned?

Ted

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Derrick J Brashear
Sent: Friday, December 26, 2003 8:00 PM
To: [EMAIL PROTECTED]
Subject: RE: [OpenAFS] Re: SuSe 9.0 &Heimdal.6

On Fri, 26 Dec 2003, ted creedon wrote:

> I deleted key 2 in bos
>
> Bos listkeys shemya -noauth
> Examine afs
>
> Produce the same checksum for kvno 0

ok, that's what you want. you should be able to do the conversion. if it
doesn't work, i can make some guesses as to why, but you should try it
before i alarm you about things you might not need to deal with
_______________________________________________
OpenAFS-info mailing list
[EMAIL PROTECTED]
https://lists.openafs.org/mailman/listinfo/openafs-info
2003-12-27T09:09:20 AS-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for krbtgt/[EMAIL 
PROTECTED]
2003-12-27T09:09:20 Using des-cbc-md5/des3-cbc-sha1
2003-12-27T09:09:20 sending 614 bytes to IPv4:10.1.1.116
2003-12-27T09:09:20 TGS-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for afs/[EMAIL 
PROTECTED]
2003-12-27T09:09:20 sending 532 bytes to IPv4:10.1.1.116
2003-12-27T09:09:20 524-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for afs/[EMAIL 
PROTECTED]
2003-12-27T09:09:20 sending 1266 bytes to IPv4:10.1.1.116
2003-12-27T09:09:29 524-REQ [EMAIL PROTECTED] from IPv4:10.1.1.116 for afs/[EMAIL 
PROTECTED]
2003-12-27T09:09:29 sending 1266 bytes to IPv4:10.1.1.116
shemya:/var/log/openafs # kadmin -l
kadmin> list *
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  afs/[EMAIL PROTECTED]
  admin/[EMAIL PROTECTED]
  kadmin/[EMAIL PROTECTED]
  kadmin/[EMAIL PROTECTED]
  kadmin/[EMAIL PROTECTED]
  changepw/[EMAIL PROTECTED]
  krbtgt/[EMAIL PROTECTED]
  host/[EMAIL PROTECTED]

Reply via email to