Arla auth problems on mac os 10.4
Måns Nilsson
mansaxel at kthnoc.net
Wed Aug 22 13:04:02 CEST 2007
--On onsdag, onsdag 22 aug 2007 10.14.02 +0200 Jonathan Beckman
<beckman at spotify.com> wrote:
> I'm trying to use arla 0.90 against an openafs server, if I use the
> openafs client it works fine but when I try with arla it will connect
> fine but it not authing properly as an user. How can I debug this? The
> only way (I can see) is putting a sniffer there and hope and pray to god
> that I can see useful data, which I doubt I will.
I think you might not have kerberos tickets available for remodeling into
tokens. I am assuming here, that you are using some system-provided ticket
aquisition method, either loginwindow calling stuff or /usr/bin/kinit.
I am not certain that arla will pick this up. Thomass suggested that you
look into things by using the heimdal subset shipped with arla; eg if
/usr/arla/bin/klist shows up empty, you might have a problem. I _think_
this is best solved by saying:
[libdefaults]
default_cc_name = API:
in /etc/krb5.conf -- but I might be in error.
--
Måns Nilsson Systems Specialist
+46 70 681 7204 cell KTHNOC
+46 8 790 6518 office MN1334-RIPE
YOW!! Up ahead! It's a DONUT HUT!!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
Url : http://lists.stacken.kth.se/pipermail/arla-drinkers/attachments/20070822/ad2ca903/attachment.bin
More information about the Arla-drinkers
mailing list