getting tokens for a remote cell (PATCH INCLUDED)

[Christopher Allen Wing]

Willi:

> >     klog: Unable to authenticate to Kerberos: Principal expired (kerberos)
> 
> I also came across this problem. However, in my case it was a wrong
> setting of the environment variable "KRBTKFILE".

Hmm, actually this seems to be a bug in Arla or kth-krb. klog calls upon
krb_afslog_uid() to get an AFS token. krb_afslog_uid() should use the
internal ticket file name as set by krb_set_tkt_string(). However, it
seems that krb_afslog_uid(), or one of the functions that it calls, uses
the KRBTKFILE environment variable instead.

Try this patch and it should fix it:

--- arla-0.31.orig/appl/afsutils/klog.c	Wed Mar 15 11:58:57 2000
+++ arla-0.31/appl/afsutils/klog.c	Wed Mar 15 12:01:09 2000
@@ -710,6 +710,7 @@
 	}
     }
 
+    setenv("KRBTKFILE", tkfile, 1);
     krb_set_tkt_string (tkfile);
 
     /* Get the Kerberos TGT */



I'll look through kth-krb later today and see what is really going
on. Now, I have to eat lunch.


Thanks for the bug report,

Chris Wing
wingc at engin.umich.edu