It helps to look at the krb5 logfiles, they tell you if you incorrect principals.
Ken Hornstein's migration guide is the best howto noting that des-crc-cbc should be des-crc-cbc:normal. Using strace is helpful also. tedc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pucky Loucks Sent: Thursday, February 16, 2006 12:00 PM To: [email protected] Subject: Re: [OpenAFS] ext_svrtab? Thanks Steve, I'll give that a try. Pucky On 16-Feb-06, at 12:23 PM, Steve Devine wrote: > Pucky Loucks wrote: > >> Hi Brandon, >> >> how do I extract the service key from kadmin so that I can add it >> to AFS? The only documentation that I could find is so old, that >> I'm kind of lost. >> >> http://www.cs.cmu.edu/afs/andrew.cmu.edu/usr/shadow/www/afs/afs- >> with- kerberos.html >> >> What I'm trying to do is replace kaserver with MIT Kerberos. Do >> you know of more up to date info on this topic? I also have the >> book Managing AFS and all it has are 5 points on how to do it. >> >> 1)stop kaserver >> 2) create principal called afs >> 3) use ext_srvtab to extract the AFS service key >> 4) use asetkey to install this extracted service into AFS's keyfile >> 5) put the MIT kerberos REALM name into the afs configuration >> file / usr/afs/etc/krb.conf >> >> That's it, but I'm not having any luck with step 3. >> >> any help would be great. >> >> Pucky >> >> >> On 16-Feb-06, at 11:59 AM, Brandon S. Allbery KF8NH wrote: >> >>> >>> On Feb 16, 2006, at 2:56 , Pucky Loucks wrote: >>> >>>> I can't find this program anywhere, can someone point me in the >>>> right direction? I'm implementing MIT Kerberos in my Cell and >>>> need to export the Key from MIT into AFS. >>> >>> >>> It's not a program, it's a command within kadmin. >>> >>> -- >>> brandon s. allbery [linux,solaris,freebsd,perl] >>> [EMAIL PROTECTED] >>> system administrator [openafs,heimdal,too many hats] >>> [EMAIL PROTECTED] >>> electrical and computer engineering, carnegie mellon >>> university KF8NH >>> >>> >>> >> >> _______________________________________________ >> OpenAFS-info mailing list >> [email protected] >> https://lists.openafs.org/mailman/listinfo/openafs-info > > I have some notes on what we did when we migrated here: > http://msu.edu/service/afs/migrate/notes-onkdc-setup.pdf > /sd > > -- > Steve Devine > Storage Systems > Academic Computing & Network Services > Michigan State University > > 506 Computer Center > East Lansing, MI 48824-1042 > 1-517-432-7327 > > Baseball is ninety percent mental; the other half is physical. > - Yogi Berra > > _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
