aklog Principal not found

[Matthias Teege-3]

Moin,

I use the openafs client on a Linux system. I can get an afs token with
aklog -c mteege.de -k mteege.de. Aklog without any parameter gives me an
error like this:

; aklog -d
Authenticating to cell mteege.de (server xon.mteege.de).
We've deduced that we need to authenticate to realm MTEEGE.DE.
Getting tickets: afs/mteege.de@...
Principal not found, trying alternate service name: afs@...
Kerberos error code returned by get_cred: -1765328377
aklog: Couldn't get mteege.de AFS tickets:
aklog: unknown RPC error (-1765328377) while getting AFS tickets

What causes this error message?
Matthias

_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@...
https://lists.openafs.org/mailman/listinfo/openafs-info

[Jeffrey Altman-2]

Kerberos realms are case sensitive and by convention they are UPPERCASE.

Apparently you named your realm in lowercase and therefore aklog cannot
obtain service tickets because MTEEGE.DE != mteege.de.

Jeffrey Altman


Matthias Teege wrote:

>
> Moin,
>
> I use the openafs client on a Linux system. I can get an afs token with
> aklog -c mteege.de -k mteege.de. Aklog without any parameter gives me an
> error like this:
>
> ; aklog -d
> Authenticating to cell mteege.de (server xon.mteege.de).
> We've deduced that we need to authenticate to realm MTEEGE.DE.
> Getting tickets: afs/mteege.de@...
> Principal not found, trying alternate service name: afs@...
> Kerberos error code returned by get_cred: -1765328377
> aklog: Couldn't get mteege.de AFS tickets:
> aklog: unknown RPC error (-1765328377) while getting AFS tickets
>
> What causes this error message?
> Matthias
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@...
> https://lists.openafs.org/mailman/listinfo/openafs-info

[Harald Barth-2]

> I use the openafs client on a Linux system. I can get an afs token
> with aklog -c mteege.de -k mteege.de. Aklog without any parameter
> gives me an error like this:

Many libraries assume that the realm is in uppercase. If you really
named your realm mteege.de I would suggest you rename to MTEEGE.DE if
you still can. Cell names normally are lower case (as yours).

Harald.
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@...
https://lists.openafs.org/mailman/listinfo/openafs-info

[Jeffrey Altman-2]

Harald Barth wrote:
>> I use the openafs client on a Linux system. I can get an afs token
>> with aklog -c mteege.de -k mteege.de. Aklog without any parameter
>> gives me an error like this:
>
> Many libraries assume that the realm is in uppercase. If you really
> named your realm mteege.de I would suggest you rename to MTEEGE.DE if
> you still can. Cell names normally are lower case (as yours).

Cell names are case insensitive.  Therefore it doesn't matter how you
type it.  By convention they are normalized to lowercase before comparison.

Jeffrey Altman

[Russ Allbery]

Jeffrey Altman <jaltman@...> writes:
> Harald Barth wrote:

>> Many libraries assume that the realm is in uppercase. If you really
>> named your realm mteege.de I would suggest you rename to MTEEGE.DE if
>> you still can. Cell names normally are lower case (as yours).
>
> Cell names are case insensitive.  Therefore it doesn't matter how you type
> it.  By convention they are normalized to lowercase before comparison.

However, be warned that some versions of OpenAFS won't work if you put the
cell name in uppercase in ThisCell.  (I think this is a bug that we later
fixed, but it caused us some consternation.)

--
Russ Allbery (rra@...)             <http://www.eyrie.org/~eagle/>
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@...
https://lists.openafs.org/mailman/listinfo/openafs-info