vladimir konrad <[EMAIL PROTECTED]> writes:

> oops

> the aklog -524 succeeds, so it is something to do with our kerberos
> configuration...

> strange that the sarge doesn not need -524 option though...

The sarge version of aklog predates the native K5 support in AFS and
therefore does -524 by default.  However, any AFS file server newer than,
I believe, 1.2.8 will support native K5 when configured properly and this
is now the strongly recommended AFS configuration.  Ideally, your local
AFS administrators will move in that direction.

(It's actually the AFS configuration that matters, not the Kerberos
configuration.  The AFS servers need to have the DES key of the K5
principal in their KeyFiles and, if the Kerberos realm is different than
the AFS cell, have a krb.conf file in the server configuration directory
listing the Kerberos realm.)

-- 
Russ Allbery ([EMAIL PROTECTED])               <http://www.eyrie.org/~eagle/>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to