On 12 Apr 2011, at 16:09, Jeffrey Altman wrote: > If the kvno you generated is 8, then the keno you ask asetkey to add must > also be 8.
The principal was added with kvno 8, but then the 'ktadd' incremented that number by 1 one when it regenerated the key to create the keytab. klist shows the kvno as 9: >> [root@afs1c afs]# klist -e -k afs1_dantolov.uits.indiana.edu_kdc.keytab >> Keytab name: FILE:afs1_dantolov.uits.indiana.edu_kdc.keytab >> KVNO Principal >> ---- >> -------------------------------------------------------------------------- >> 9 afs/[email protected] (DES cbc mode >> with RSA-MD5) I think the problem is the encryption type. When we do the extract, we specifically ask for a des-cbc-crc key. The key you have created is des-cbc-md5. I suspect that the extraction routine is seeing these types as different, and so failing the match. Try again with a des-cbc-crc key, and see if that works! Cheers, Simon. _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
