Hi Andreas, I'm glad that you solved the problem and got things to work.
Jason --------------------------------------------------------------------------- Jason Edgecombe | Linux Administrator UNC Charlotte | The William States Lee College of Engineering 9201 University City Blvd. | Charlotte, NC 28223-0001 Phone: 704-687-1943 [email protected] | http://engr.uncc.edu | Facebook --------------------------------------------------------------------------- If you are not the intended recipient of this transmission or a person responsible for delivering it to the intended recipient, any disclosure, copying, distribution, or other use of any of the information in this transmission is strictly prohibited. If you have received this transmission in error, please notify me immediately by reply e-mail or by telephone at 704-687-1943. Thank you. On Mon, Jul 24, 2017 at 4:21 AM, Andreas Ladanyi <[email protected]> wrote: > Hi Jason, > > i want to feedback that i found the issue in the past. > > The problem was that not all subdirectories were set with the AFS apache > username and rl permission because i was using "fs sa ...." instead "find > .... -type d -exec fs sa .... ". > > So now it seems to work :-) > > thanks and regards, > Andreas > > Andreas, > > Try modifying your systemd unit file to add the "-t" parameter as follows: > > ExecStart=/usr/bin/k5start -o apache -K30 -t -f /etc/httpd.keytab > httpd-principal-name -- /usr/sbin/httpd $OPTIONS -DFOREGROUND > > > The "-t" option runs the aklog command to grab tokens. I don't use this > because my AFS folders are granted via IP ACLs and the kerberos credentials > are only used for accessing kerberized SMB shares. > > i already used the -t option. > > > Sincerely, > Jason > > >
