Arla auth problems on mac os 10.4

Måns Nilsson mansaxel at kthnoc.net
Wed Aug 22 13:04:02 CEST 2007


--On onsdag, onsdag 22 aug 2007 10.14.02 +0200 Jonathan Beckman
<beckman at spotify.com> wrote:

> I'm trying to use arla 0.90 against an openafs server, if I use the
> openafs client it works fine but when I try with arla it will connect
> fine but it not authing properly as an user. How can I debug this? The
> only way (I can see) is putting a sniffer there and hope and pray to god
> that I can see useful data, which I doubt I will.

I think you might not have kerberos tickets available for remodeling into
tokens. I am assuming here, that you are using some system-provided ticket
aquisition method, either loginwindow calling stuff or /usr/bin/kinit. 

I am not certain that arla will pick this up. Thomass suggested that you
look into things by using the heimdal subset shipped with arla; eg if
/usr/arla/bin/klist shows up empty, you might have a problem. I _think_
this is best solved by saying: 

[libdefaults]
        default_cc_name = API:

in /etc/krb5.conf -- but I might be in error. 
-- 
Måns Nilsson                     Systems Specialist
+46 70 681 7204   cell                       KTHNOC
+46 8 790 6518  office                  MN1334-RIPE

YOW!!  Up ahead!  It's a DONUT HUT!!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
Url : http://lists.stacken.kth.se/pipermail/arla-drinkers/attachments/20070822/ad2ca903/attachment.bin


More information about the Arla-drinkers mailing list