MIT Kerberos 1.8 disables DES by default. You can re-enable it by
setting allow_weak_enctypes on your krb5.conf
S.
Quoting Derrick Brashear <[email protected]>:
On Mon, Jan 18, 2010 at 9:37 AM, Jan Pospisil <[email protected]> wrote:
Hello OpenAFS gurus :),pp
I am having problems getting AFS tokens probably after one of recent system
upgrade. I am using debian testing on x86_64 with
- *krb5* version 1.8+dfsg~alpha1-2
- *openafs* version 1.4.11+dfsg-6
(in particular m-a build of openafs-modules-2.6.30-2-amd64 version
1.4.11+dfsg-6+2.6.30-8squeeze1)
- kernel from linux-image-2.6.30-2-amd64 ver. 2.6.30-8squeeze1
The afsd is runnig fine, I can see the AFS tree, I have the proper krb5
tickets, but I am not able to get the AFS tokens:
ho...@aither:~$ klist -e
Ticket cache: FILE:/tmp/krb5cc_6141
Default principal: [email protected]
Valid starting Expires Service principal
01/18/10 15:21:14 01/18/10 23:21:10 krbtgt/[email protected]
renew until 02/02/10 15:21:10, Etype (skey, tkt): AES-256 CTS mode
with 96-bit SHA-1 HMAC, Triple DES cbc mode with HMAC/sha1
ho...@aither:~$ aklog -d -c zcu.cz
Authenticating to cell zcu.cz (server oknos.zcu.cz).
Trying to authenticate to user's realm ZCU.CZ.
Getting tickets: afs/[email protected]
Kerberos error code returned by get_cred : -1765328184
aklog: Couldn't get zcu.cz AFS tickets:
aklog: unknown RPC error (-1765328184) while getting AFS tickets
they're just standard krb5 errors.
#define KRB5_CC_NOT_KTYPE (-1765328184L)
ho...@aither:~$ klog
klog: unknown RPC error (-1765328370) Unable to authenticate to use
afs/zcu.cz
#define KRB5KDC_ERR_ETYPE_NOSUPP (-1765328370L)
what key type is the AFS key?
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
