arla-0.41 and support for Tiger

Jean-Damien Durand Jean-Damien.Durand at cern.ch
Sat Jan 14 09:08:49 CET 2006


On Sunday 08 January 2006 06:21, Jean-Damien Durand wrote:
> On Saturday 07 January 2006 13:52, Tomas Olsson wrote:
> > Jean-Damien Durand <Jean-Damien.Durand at cern.ch> writes:
> > > The very access to afs at cern takes a long time (few 10s seconds) - then
> > > it is ok. Don't know why. I tried with and without enabling 7001/udp on
> > > my router - same thing. Perhaps an easy thing to track and/or to
> > > configure - do not know - any possible hint appreciated (but again,
> > > this is only at the very 1st connect!).
> >
> > It sounds like a timeout problem, like if the first servers we try to
> > contact aren't reachable, or something like that. You may want to try
> > logging network traffic to see what's going on (ethereal, tcpdump, ...),
> > or do 'fs arladebug alm' to let arlad log (a lot) to syslog.
> >
> > /t
>
> Must have been a temporary load on the servers, or network hickup (plus I
> do not trust entirely my adsl link); today it react well; I also tried with
> directories that were for sure not in the cache - all looks ok now! Sorry
> to have bothered you with this non-problem.
> Thanks, Cheers, JD.

FYI I tracked down a bit more with kinit at home v.s. at work: with a machine 
inside my work domain (or within a vpn), kinit is enough:

% kinit -4
jdurand at CERN.CH's Password:
% klist -T
Credentials cache: FILE:/tmp/krb5cc_27343
        Principal: jdurand at CERN.CH

  Issued           Expires          Principal
Jan 14 09:02:23  Jan 15 10:02:23  krbtgt/CERN.CH at CERN.CH
Jan 14 09:02:24  Jan 15 10:02:23  afs at CERN.CH

Jan 14 09:02:24  Jan 15 10:28:45  User's (AFS ID 27343) tokens for cern.ch

At home, beside my router, I have to say kinit -A (ticket with no addresses), 
otherwise I will get:

% kinit -4
jdurand at CERN.CH's Password:
kinit: converting creds: converting credentials: Incorrect net address
% klist -T
Credentials cache: FILE:/tmp/krb5cc_27343
        Principal: jdurand at CERN.CH

  Issued           Expires          Principal
Jan 14 09:05:26  Jan 15 10:05:26  krbtgt/CERN.CH at CERN.CH
Jan 14 09:05:26  Jan 15 10:05:26  afs at CERN.CH

Verification that it works with a no-address ticket:

% kinit -4 --no-address
jdurand at CERN.CH's Password:
% klist -T
Credentials cache: FILE:/tmp/krb5cc_27343
        Principal: jdurand at CERN.CH

  Issued           Expires          Principal
Jan 14 09:06:15  Jan 15 10:06:15  krbtgt/CERN.CH at CERN.CH
Jan 14 09:06:15  Jan 15 10:06:15  afs at CERN.CH

Jan 14 09:06:15  Jan 15 10:32:36  User's (AFS ID 27343) tokens for cern.ch

So this is a krb5 setup on either my client or their servers - don't know 
precisely for the moment. I will follow this up elsewhere -; this is not an
arla issue!

Cheers, JD.


More information about the Arla-drinkers mailing list