On Tue, 27 Dec 2005, Adam Megacz wrote:


[see end of message for additional details on why my cell works this way]

This is weird.  When I execute "aklog -c megacz.com", aklog does not attempt
to authenticate to the "obvious" k5 realm (MEGACZ.COM -- I have the
DNS autodetection entries for that, and they work):

 [EMAIL PROTECTED]:~$aklog -d -c megacz.com

 Authenticating to cell megacz.com (server fleet.cs.berkeley.edu).
 We've deduced that we need to authenticate to realm CS.BERKELEY.EDU.
 Getting tickets: afs/[EMAIL PROTECTED]

aklog came from athena, where cells were all in the ATHENA.MIT.EDU realm. It's using the krb5 "realm of host" function on,probably, the server.

Make your krb5.conf say your server is in the MEGACZ.COM realm.
Be happy.

Derrick

_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to