On 9/12/2022 10:10 AM, Jose M Calhariz (jose.calha...@tecnico.ulisboa.pt) wrote:
Hi,

I have setup a test cell of OpenAFS 1.6.x, Debian 9.  For testing the
upgrade to Debian 11.  When I do the initial setup of the cell and do
the first aklog I get the following error:

aklog: unknown RPC error (-1765328370) while getting AFS tickets

How do I get the meaning of this error?  This error number is not on
Google.  I have just tested the aklog command on the client against
another cell and it worked.  So my problem is the new cell.

The error is Kerberos v5 error KRB5KDC_ERR_ETYPE_NOSUPP, "KDC has no support for encryption type".

Is the OpenAFS client version older than 1.6.5?

Prior to 1.6.5 aklog explicitly requested AFS service tickets with a DES-CBC-CRC session key.

Alternatively, the AFS service principal for the test cell might have been created without an AES key.

Jeffrey Altman




Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to