:strip_icc():strip_exif()/u/105199/crop5cb76c6d18020_cropped.jpeg?f=community)
Ik heb kerberos opgezet op mijn debian etch vm, en wil daar openafs op gaan draaien (ivm betere rechtensysteem dan nfs).
Ik heb deze guide gebruikt voor kerberos:
http://www.debian-administration.org/articles/570
Voor openafs gebruik ik deze guide:
http://www.debian-administration.org/articles/610
Mijn domein is boudewijnector.nl, de kerberos en afs doos zijn hetzelfde ip adres (10.13.37.130, met als A record krb.boudewijnector.nl en afs.boudewijnector.nl).
Nu kan ik netjes de key importeren enzo:
Echter als ik een share aan wil maken:
De disk is gemount ,kerberos werkt etc.
En toch werkt het niet.
Kan iemand me een tipje geven van wat er fout gaat?
Possibel communication failure
Ik heb deze guide gebruikt voor kerberos:
http://www.debian-administration.org/articles/570
Voor openafs gebruik ik deze guide:
http://www.debian-administration.org/articles/610
Mijn domein is boudewijnector.nl, de kerberos en afs doos zijn hetzelfde ip adres (10.13.37.130, met als A record krb.boudewijnector.nl en afs.boudewijnector.nl).
Nu kan ik netjes de key importeren enzo:
code:
1
2
3
4
| boudewijn@kerberos:~$ sudo bos listkeys afs1 -localauth key 3 has cksum 3183730113 Keys last changed on Sun Mar 29 04:18:08 2009. All done. |
Echter als ik een share aan wil maken:
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
| kerberos:/# afs-newcell
Prerequisites
In order to set up a new AFS cell, you must meet the following:
1) You need a working Kerberos realm with Kerberos4 support. You
should install Heimdal with KTH Kerberos compatibility or MIT
Kerberos 5.
2) You need to create the single-DES AFS key and load it into
/etc/openafs/server/KeyFile. If your cell's name is the same as
your Kerberos realm then create a principal called afs. Otherwise,
create a principal called afs/cellname in your realm. The cell
name should be all lower case, unlike Kerberos realms which are all
upper case. You can use asetkey from the openafs-krb5 package, or
if you used AFS3 salt to create the key, the bos addkey command.
3) This machine should have a filesystem mounted on /vicepa. If you
do not have a free partition, then create a large file by using dd
to extract bytes from /dev/zero. Create a filesystem on this file
and mount it using -oloop.
4) You will need an administrative principal created in a Kerberos
realm. This principal will be added to susers and
system:administrators and thus will be able to run administrative
commands. Generally the user is a root or admin instance of some
administrative user. For example if jruser is an administrator then
it would be reasonable to create jruser/admin (or jruser/root) and
specify that as the user to be added in this script.
5) The AFS client must not be running on this workstation. It will be
at the end of this script.
Do you meet these requirements? [y/n] y
If the fileserver is not running, this may hang for 30 seconds.
/etc/init.d/openafs-fileserver stop
What administrative principal should be used? root/admin
/etc/openafs/server/CellServDB already exists, renaming to .old
/etc/init.d/openafs-fileserver start
bos adduser kerberos.boudewijnector.nl root.admin -localauth
Creating initial protection database. This will print some errors
about an id already existing and a bad ubik magic. These errors can
be safely ignored.
pt_util: /var/lib/openafs/db/prdb.DB0: Bad UBIK_MAGIC. Is 0 should be 354545
Ubik Version is: 2.0
Error while creating system:administrators: Entry for id already exists
bos create kerberos.boudewijnector.nl ptserver simple /usr/lib/openafs/ptserver -localauth
bos create kerberos.boudewijnector.nl vlserver simple /usr/lib/openafs/vlserver -localauth
bos create kerberos.boudewijnector.nl fs fs -cmd '/usr/lib/openafs/fileserver -p 23 -busyat 6c 1200' -cmd /usr/lib/openafs/volserver -cmd /usr/lib/openafs/salvager -localauth
bos setrestart kerberos.boudewijnector.nl -time never -general -localauth
Waiting for database elections: done.
vos create kerberos.boudewijnector.nl a root.afs -localauth
Could not get an Id for volume root.afs
Possible communication failure
Possible communication failure
Error in vos create command.
Possible communication failure
Failed: 65280
Cell setup failed, ABORTING
bos shutdown kerberos.boudewijnector.nl -localauth -wait
bos delete kerberos.boudewijnector.nl fs -localauth
bos delete kerberos.boudewijnector.nl vlserver -localauth
bos delete kerberos.boudewijnector.nl ptserver -localauth
rm /var/lib/openafs/db/prdb*
bos removeuser kerberos.boudewijnector.nl root.admin -localauth
kerberos:/# |
De disk is gemount ,kerberos werkt etc.
En toch werkt het niet.
Kan iemand me een tipje geven van wat er fout gaat?
Possibel communication failure
