Lönroth Erik wrote: > I believe I have... My file looks like this. Can I be sure this is OK? > In my missery I can't trust anything at the moment. > > [EMAIL PROTECTED] ~]# cat /usr/afs/etc/krb.conf > LAB.SCANIA.COM > LAB.SCANIA.COM sesocolab11.scania.com
This is fine. Although the second line is not used by AFS so you can remove it. Did you restart the AFS servers after setting this value? > I have also looked in AD to se the Service principal binding (Is this > right?) : > > C:\setspn -A afs/sss.se.scania.com afs > Registering ServicePrincipalNames for > CN=afs,OU=Users,OU=VAS,OU=TEST,DC=lab,DC=s > cania,DC=com > afs/sss.se.scania.com > Updated object > > C:\setspn -L afs > Registered ServicePrincipalNames for > CN=afs,OU=Users,OU=VAS,OU=TEST,DC=lab,DC=sc > ania,DC=com: > afs/sss.se.scania.com > HOST/afs > HOST/afs.LAB > That is fine. RXKADBADTICKET can be generated if the clocks between AFS and AD are not synchronized. Are they? Jeffrey Altman _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
