I was using the pdf copy from the site .. I've since moved on to building 1.8 from source, I'll look in there for docs
-----Original Message----- From: Benjamin Kaduk [mailto:[email protected]] Sent: Tuesday, June 20, 2017 11:22 PM To: John D'Ausilio Cc: [email protected] Subject: Re: [OpenAFS] New installation, linux server, AD kerberos On Tue, Jun 20, 2017 at 09:41:04PM +0000, John D'Ausilio wrote: > Thanks for the clues, moved me a bit further along. After reading the unix > quickstart again, I noticed the note re: asetkey and 1.8 .. but I can't find > anywhere where it says anything about copying the keytab intact. > Once I get it working I'll post a (hopefully complete) procedure for the next > guy .. Thanks for doing that. Just to double check, where are you getting your QuickStartUnix guide from? (I think the copy on the website is not rebuild automatically, and only the XML source in the git master branch gets updated very often.) But, e.g., http://doc.openafs.org/QuickStartUnix/HDRWQ50.html notes: The OpenAFS 1.8.x series stores the cell-wide shared keys in the file /usr/afs/etc/KeyFileExt, whereas the 1.6.x series uses a krb5 keytab format file in /usr/afs/etc/rxkad.keytab. These instructions create both files, but populating the KeyFileExt file will only succeed using the version of asetkey from OpenAFS 1.8.x. -Ben
