Details on broken aklog and klog (was:Arla and OSX 10.2)

Aaron Rosenblum arosenbl at mac.com
Sat Aug 31 22:25:30 CEST 2002


These errors are interesting because when I compiled .35.8 on 10.2 and 
made the kext myself, aklog worked.  I have my machine set to get 
tickets from the loginwindow and a /usr/arla/bin/aklog works fine.  Has 
something changed since .35.8 regarding aklog?

Aaron

FYI: I use krbafs with the built in MIT KFM 4.5


On Friday, August 30, 2002, at 05:38 PM, Thomas Jordan wrote:

> Max, I originally got my tickets with kinit - no arla tools.
>
>     t.
>
> On 8/30/02 16:23, "Massimo Marino" <Massimo_Marino at lbl.gov> wrote:
>
>> Same for me
>>
>> Only difference is that kalog does not work in my case hence klist is
>> empty.
>>
>> otool output is the same line by line.
>>
>> Massimo
>>
>> On Friday, August 30, 2002, at 10:32  PM, Thomas Jordan wrote:
>>
>>> More details on the authentication errors that I described earlier
>>> today
>>> with my mostly successful build of 0.35.10pre2 on OSX 10.2.
>>>
>>> [d-5810-lss:~/desktop] jordant% klist
>>> Kerberos 5 ticket cache: 'API:Initial default ccache'
>>> Default Principal: jordant at FNAL.GOV
>>> Valid Starting     Expires            Service Principal
>>> 08/30/02 11:08:26  08/31/02 13:08:26  krbtgt/FNAL.GOV at FNAL.GOV
>>>
>>> Kerberos 4 ticket cache: 'Initial default ccache'
>>> Default Principal: jordant at FNAL.GOV
>>> Issued             Expires            Service Principal
>>> 08/30/02 11:08:26  08/31/02 14:20:20  krbtgt.FNAL.GOV at FNAL.GOV
>>>
>>> [d-5810-lss:~/desktop] jordant%
>>>
>>>
>>> Output of Otool:
>>>
>>> [d-5810-lss:jordant/public_html/talks] jordant% otool -L
>>> /usr/arla/bin/aklog
>>> /usr/arla/bin/aklog:
>>>
>>> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
>>> (compatibility version 5.0.0, current version 5.0.0)
>>>         /usr/local/lib/libkrbafs.dylib (compatibility version 0.0.0,
>>> current
>>> version 0.0.0)
>>>         /usr/lib/libSystem.B.dylib (compatibility version 1.0.0,
>>> current
>>> version 60.2.0)
>>> [d-5810-lss:jordant/public_html/talks] jordant% otool -L
>>> /usr/arla/bin/klog
>>> /usr/arla/bin/klog:
>>>
>>> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
>>> (compatibility version 5.0.0, current version 5.0.0)
>>>         /usr/local/lib/libkrbafs.dylib (compatibility version 0.0.0,
>>> current
>>> version 0.0.0)
>>>         /usr/lib/libSystem.B.dylib (compatibility version 1.0.0,
>>> current
>>> version 60.2.0)
>>> [d-5810-lss:jordant/public_html/talks] jordant%
>>>
>>>
>>> Output of klog:
>>> [d-5810-lss:~/desktop] jordant% klog
>>> jordant at fnal.gov's Password:
>>> Abort
>>> [d-5810-lss:~/desktop] jordant%
>>> The abort appears after I enter an AFS (not kerberos) password.
>>>
>>> Output of aklog:
>>> [d-5810-lss:~/desktop] jordant% aklog -debug
>>> aklog: get_afs_id for jordant in cell fnal.gov using pts-db
>>> aklog: Failed getting tokens for cell fnal.gov.
>>> [d-5810-lss:~/desktop] jordant% pts examine jordant
>>> Name: jordant, id: 8998, owner: system:administrators, creator: opo2,
>>>   membership: 11, flags: S----, group quota: 20.
>>> [d-5810-lss:~/desktop] jordant%
>>>
>>> Thanks for looking at this.
>>>
>>> Best regards,
>>>     Tom
>>>
>>> -- 
>>> Thomas Jordan
>>> Fermi National Accelerator Laboratory
>>> Kirk and Pine Streets
>>> PO Box 500
>>> MS 226 WH15W
>>> Batavia, Illinois
>>> 60510
>>> voice: 630.840.4035
>>> fax : 630.840.8248
>>>
>>>
>
> -- 
> Thomas Jordan
> Fermi National Accelerator Laboratory
> Kirk and Pine Streets
> PO Box 500
> MS 226 WH15W
> Batavia, Illinois
> 60510
> voice: 630.840.4035
> fax : 630.840.8248
>






More information about the Arla-drinkers mailing list