Dear Steve/Matt,
Please configure all login machines be configured like g3n03 so that
kinit works correctly.
Thanks,
Sridhara
---------------------------------------------------------------------
Prof. Sridhara Rao Dasu Department of Physics
dasu@hep.wisc.edu University of Wisconsin
http://www.hep.wisc.edu/~dasu 4289 Chamberlin Hall
608-262-3678 ( Office ) 1150 University Avenue
408-829-6625 (Wireless) Madison, WI 53706, USA
Begin forwarded message:
> From: Kevin Flood <kflood2@wisc.edu>
> Date: May 19, 2008 10:49:33 PM GMT+02:00
> To: Sridhara Dasu <dasu@hep.wisc.edu>
> Cc: "R. Prepost" <rxp@slac.stanford.edu>, Kevin Flood <kflood@hep.wisc.edu
> >
> Subject: Re: afs tokens
> Reply-To: kflood@hep.wisc.edu
>
> hi guys,
>
> i believe slac -> wisc works ok as indicated
>
> however, wisc -> slac can only be done from a single machine
> "g3n03" -- one then proceeds with kinit and aklog as indicated
> in the previous email
>
> if further problems, please let me know
>
> cheers,
> kevin
>
> ----- Original Message -----
> From: Sridhara Dasu <dasu@hep.wisc.edu>
> Date: Monday, May 19, 2008 3:41 pm
> Subject: Re: afs tokens
> To: "R. Prepost" <rxp@slac.stanford.edu>
> Cc: Kevin Flood <kflood@hep.wisc.edu>
>
>
>> Dear Dick,
>>
>> We don't run kerberos at HEP yet. So, you need to use klog.
>> I just checked that I can get hep tokens from my account at SLAC
>> (I used both noric.slac.stanford.edu and tersk.slac.stanford.edu):
>>
>> noric05:~> which klog
>> /usr/afsws/bin/klog
>> noric05:~> klog -cell hep.wisc.edu
>> Password:
>> noric05:~> tokens
>>
>> Tokens held by the Cache Manager:
>>
>> User's (AFS ID 202) tokens for afs@hep.wisc.edu [Expires May 20
>> 14:51]
>> User's (AFS ID 1087) tokens for afs@slac.stanford.edu [Expires May 20
>>
>> 14:24]
>> --End of list--
>>
>> Are you trying from a different account?
>>
>> If you want to get SLAC tokens from HEP account, you need to use
>> kinit
>> as SLAC has removed non-kerberos login facility. You need to do:
>>
>> kinit rxp@SLAC.STANFORD.EDU
>>
>> and type in your password. You can then look at your tickets using
>> klist. If it works then you should get AFS access to SLAC by issuing
>> the command:
>>
>> aklog -cell slac.stanford.edu
>>
>> Unfortunately, I just verified that the last command does not work.
>>
>> Kevin was asking about this issue the other day. Perhaps, he can
>> help with this problem.
>>
>> Regards,
>> Sridhara
>>
>> ---------------------------------------------------------------------
>> Prof. Sridhara Rao Dasu Department of Physics
>> dasu@hep.wisc.edu University of Wisconsin
>> http://www.hep.wisc.edu/~dasu 4289 Chamberlin Hall
>> 608-262-3678 ( Office ) 1150 University Avenue
>> 408-829-6625 (Wireless) Madison, WI 53706, USA
>>
>>
>> On May 19, 2008, at 9:05 PM, R. Prepost wrote:
>>
>>> Sridhara,
>>> SLAC has phased out klog and now uses kinit for afs tokens. How do
>>
>>> I get a hep token? The command "kinit prepost@HEP.WISC.EDU"
>>> results in "unable to reach any KDC in realm HEP.WISC.EDU" after
>>> entering the password.
>>>
>>> Dick
>>
|