pts membership not working?

Love lha at stacken.kth.se
Mon Jan 8 18:07:48 CET 2001


Todd Cohen <cohentl at clarkson.edu> writes:

> ok, I tried it out and now I have a different problem. I can't get a
> token. I normally install via the freebsd ports collection so what I did
> was a ./configure --prefix=/usr/local . Any ideas?2
> 
> lizard:/usr/home/cohentl$ klog
> cohentl at clarkson.edu's Password:
> klog: Unable to authenticate to Kerberos: Permission Denied (kerberos)
> lizard:/usr/home/cohentl$ kalog
> Getting ticket for cohentl at clarkson.edu
> Password: 
> kalog: ka_authenticate failed with 180514

If you apply the attached patch that print out the text version of the
errorcode you'll see that you have the wrong time. Ever considered ntpd ?

  : lha at nutcracker ; fs strerror 180514
  180514 => ka - clock skew

Love



Version: 1

Add ka-errors and print the text version of error in kalog.

Index: kalog.c
===================================================================
RCS file: /afs/stacken.kth.se/src/SourceRepository/arla/appl/kalog/kalog.c,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -w -u -w -r1.3 -r1.4
--- appl/kalog/kalog.c	2000/10/14 00:34:45	1.3
+++ appl/kalog/kalog.c	2001/01/08 16:52:36	1.4
@@ -112,8 +112,8 @@
     ret = ka_authenticate (user, "", cellname, NULL, 8 * 3600,
 			   KA_AUTH_TICKET|KA_AUTH_TOKEN);
     if (ret)
-	errx (1, "ka_authenticate failed with %d", ret);
+	errx (1, "ka_authenticate failed with %s (%d)",
+	      koerr_gettext(ret), ret);
     
-    
     return 0;
 }
Index: koerror.c
===================================================================
RCS file: /afs/stacken.kth.se/src/SourceRepository/arla/lib/ko/koerror.c,v
retrieving revision 1.18
retrieving revision 1.20
diff -u -w -u -w -r1.18 -r1.20
--- lib/ko/koerror.c	2000/10/02 22:43:14	1.18
+++ lib/ko/koerror.c	2001/01/08 16:48:03	1.20
@@ -46,6 +46,7 @@
 #include <pts.h>
 #include <bos.h>
 #include <ubik.h>
+#include <ka.h>
 #include <rx/rx.h>
 #include <rx/rxgencon.h>
 #ifdef KERBEROS
@@ -225,6 +226,52 @@
     {UBADPATH,	              "UBADPATH"},
     {UBADF,	              "UBADF"},
     {UREINITIALIZE,	      "UREINITIALIZE"},
+
+    /* ka errors */
+
+    {KADATABASEINCONSISTENT,	"ka - database inconsistent"},
+    {KAEXIST,			"ka - already exists"},
+    {KAIO,			"ka - io error"},
+    {KACREATEFAIL,		"ka - creation failed"},
+    {KANOENT,			"ka - no such entry"},
+    {KAEMPTY,			"ka - empty"},
+    {KABADNAME,			"ka - bad name"},
+    {KABADINDEX,		"ka - bad index"},
+    {KANOAUTH,			"ka - no authorization"},
+    {KAANSWERTOOLONG,		"ka - answer too long"},
+    {KABADREQUEST,		"ka - bad request"},
+    {KAOLDINTERFACE,		"ka - old interface"},
+    {KABADARGUMENT,		"ka - bad argument"},
+    {KABADCMD,			"ka - bad command"},
+    {KANOKEYS,			"ka - no keys"},
+    {KAREADPW,			"ka - error reading password"},
+    {KABADKEY,			"ka - bad key"},
+    {KAUBIKINIT,		"ka - error initialing ubik"},
+    {KAUBIKCALL,		"ka - error in ubik call"},
+    {KABADPROTOCOL,		"ka - bad protocol"},
+    {KANOCELLS,			"ka - no cells"},
+    {KANOCELL,			"ka - no cell"},
+    {KATOOMANYUBIKS,		"ka - too many ubiks"},
+    {KATOOMANYKEYS,		"ka - too many keys"},
+    {KABADTICKET,		"ka - bad ticket"},
+    {KAUNKNOWNKEY,		"ka - unknown key"},
+    {KAKEYCACHEINVALID,		"ka - key cache invalid"},
+    {KABADSERVER,		"ka - bad server"},
+    {KABADUSER,			"ka - bad user"},
+    {KABADCPW,			"ka - bad change password"},
+    {KABADCREATE,		"ka - bad creation"},
+    {KANOTICKET,		"ka - no ticket"},
+    {KAASSOCUSER,		"ka - associated user"},
+    {KANOTSPECIAL,		"ka - not special"},
+    {KACLOCKSKEW,		"ka - clock skew"},
+    {KANORECURSE,		"ka - no recurse"},
+    {KARXFAIL,			"ka - rx failed"},
+    {KANULLPASSWORD,		"ka - null password"},
+    {KAINTERNALERROR,		"ka - internal error"},
+    {KAPWEXPIRED,		"ka - password expired"},
+    {KAREUSED,			"ka - password reused"},
+    {KATOOSOON,			"ka - password changed too soon"},
+    {KALOCKED,			"ka - account locked"},
 
     /* Not a known error */
 





More information about the Arla-drinkers mailing list