Arla 0.35.10 pre4 builds on OSX 10.2

Thomas Jordan jordant at fnal.gov
Thu Sep 26 18:34:06 CEST 2002


On Thursday, September 26, 2002, at 11:00 AM, Alexandra Ellwood wrote:

<snip>
> Alternatively, you can just discard the tickets you got from the 
> kaserver.  KfM automatically acquires v4 tickets with the same 
> password used to get v5 tickets using either krb524 or the v4 
> protocol.  So in mixed realms, KfM will most likely have already 
> gotten v4 tickets for you.  Although in those realms perhaps the right 
> solution is aklog?
<snip>

My first attempt was to use aklog. Except that /usr/bin/arla/aklog 
yields:

[Dix-120362-dp:~] jordant% otool -L /usr/arla/bin/aklog
/usr/arla/bin/aklog:
         
/System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 
(compatibility version 5.0.0, current version 5.0.0)
         /usr/local/lib/libkrbafs.dylib (compatibility version 0.0.0, 
current version 0.0.0)
         /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, 
current version 60.2.0)
[Dix-120362-dp:~] jordant% klist
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default Principal: jordant at FNAL.GOV
Valid Starting     Expires            Service Principal
09/25/02 16:35:36  09/26/02 02:35:52  krbtgt/FNAL.GOV at FNAL.GOV
09/25/02 16:35:50  09/26/02 02:35:52  host/fsui02.fnal.gov at FNAL.GOV

Kerberos 4 ticket cache: 'Initial default ccache'
Default Principal: jordant at FNAL.GOV
Issued             Expires            Service Principal
09/25/02 16:35:36  09/26/02 02:40:36  krbtgt.FNAL.GOV at FNAL.GOV

[Dix-120362-dp:~] jordant% aklog
Kerberos Login:
Please enter your principal name: jordant at FNAL.GOV
Please enter the password for jordant at FNAL.GOV:
aklog: Failed getting tokens for cell fnal.gov.
[Dix-120362-dp:~] jordant% aklog
aklog: Failed getting tokens for cell fnal.gov.
[Dix-120362-dp:~] jordant%

You are right, KfM gets krb4 and krb5 tickets, but I still have no 
mechanism to get AFS tokens from those tickets.






More information about the Arla-drinkers mailing list