I believe I have... My file looks like this. Can I be sure this is OK? In my
missery I can't trust anything at the moment.
[EMAIL PROTECTED] ~]# cat /usr/afs/etc/krb.conf
LAB.SCANIA.COM
LAB.SCANIA.COM sesocolab11.scania.com
I have also looked in AD to se the Service principal binding (Is this right?) :
C:\setspn -A afs/sss.se.scania.com afs
Registering ServicePrincipalNames for CN=afs,OU=Users,OU=VAS,OU=TEST,DC=lab,DC=s
cania,DC=com
afs/sss.se.scania.com
Updated object
C:\setspn -L afs
Registered ServicePrincipalNames for CN=afs,OU=Users,OU=VAS,OU=TEST,DC=lab,DC=sc
ania,DC=com:
afs/sss.se.scania.com
HOST/afs
HOST/afs.LAB
/Erik
-----Original Message-----
From: Jeffrey Altman [mailto:[EMAIL PROTECTED]
Sent: Wed 1/3/2007 2:29 PM
To: Lönroth Erik
Cc: [email protected]
Subject: Re: [OpenAFS] Active Directory 2003, kerberos 5, openAFS - rxkad
error=19270407, arghhhh
Have you set the authentication realm the AFS server's krb.conf file
to LAB.SCANIA.COM ?
Jeffrey Altman
P.S. In your krb5.conf file, don't do this:
default_tkt_enctypes = des-cbc-crc des-cbc-md5
default_tgs_enctypes = des-cbc-crc des-cbc-md5