Looks like your keberos realm is missing SRV records to locate its KDCs (it has AFDB records, though). Here's UMBC's SRV records for its kdcs:
$ dig SRV _kerberos._udp.umbc.edu ;; ANSWER SECTION: _kerberos._udp.umbc.edu. 85652 IN SRV 0 0 88 kerberos2.UMBC.EDU. _kerberos._udp.umbc.edu. 85652 IN SRV 0 0 88 kerberos.UMBC.EDU. The same query for SRV records against the asu.edu domain doesn't return anything. Check out this URL for more info: http://web.mit.edu/kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-admin.html#Mapping-Hostnames-onto-Kerberos-Realms -Aaron On Tue, Oct 2, 2012 at 9:20 PM, David Bear <[email protected]> wrote: > yes indeed. > > > On Tue, Oct 2, 2012 at 6:19 PM, Aaron Knister <[email protected]> wrote: > >> It works for me in umbc.edu :) can I assume your realm/cell is asu.edu? >> >> Sent from my iPad >> >> On Oct 2, 2012, at 9:09 PM, David Bear <[email protected]> wrote: >> >> > One of our Mac users brought in her ipad and said -- Look -- I can >> browse afs -- >> > >> > She found iYFS at the app store -- way cool! Now if we could only have >> it get a token .. >> > >> > -- >> > David Bear >> > College of Public Programs at ASU >> > 602-496-0424 >> > > > > -- > David Bear > College of Public Programs at ASU > 602-496-0424 > -- Aaron Knister Systems Administrator Division of Information Technology University of Maryland, Baltimore County [email protected]
