I built version openafs-1.4.2. I also noticed that my 'configure' line is different from the SL src rpm: My configure: %configure --with-afs-sysname=%{sysname} \ --enable-redhat-buildsys \ --enable-transarc-paths \ --with-krb5 make dest_nolibafs From openafs-1.4.1-11.SL.spec (lines 482-494): %if %{krb5support} # Now build aklog/asetkey (cd afs-krb5/src && PATH=/usr/kerberos/bin:$PATH \ ./configure --prefix=/usr --with-krb5=/usr/kerberos \ --with-afs=`pwd`/../../${sysname}/dest/ && \ make all PROGS="asetkey aklog ka-forwarder" && \ touch afs2k5db && touch fakeka && \ make install PROGS="asetkey aklog ka-forwarder" \ DESTDIR=`pwd`/../../${sysname}/dest/ INSTALL_BIN=/bin \ INSTALL_SBIN=/etc) || exit 1 %endif It seems that I built things differently: I just use whatever aklog is built by 'make dest_nolibafs', whereas the SL package builds it separately as shown above. The SL package also uses a source file (openafs-krb5-2.0.tar.gz) that I don't use. I'm using my existing installation/configuration that was in place before I switched over to the SL rpm, so I haven't tried asetkey either. It's possible that I might have the same problem with that binary. Perhaps this is related to my problem and I need to re-run asetkey? I'm hesitant to try that at this point since I'm afraid of breaking something.... I had an offline comment that hinted that this may be a krb4 vs krb5 issue. My configuration is krb5 only (I don't use fakeka or any 5-to-4 translation). Do you know of any reason that this shouldn't work with a krb5-only installation? Mark > Which version of openafs is your aklog binary from, that works? > > Troy > > W. Mark Smith wrote: >> Troy, >> >> Thanks for the tip. Unfortuantely, that didn't work for me. I have in >> fact >> restarted (and rebooted) both client and server. The strange thing is >> that >> /usr/bin/afs5log from the pam_krb5-2.1.8-1 grabs the ticket with no >> problem immediately after aklog fails. Also, the aklog binary from my >> own >> build of openafs works with no problems. >> >> Mark >> >>> W. Mark Smith wrote: >>>> Hello, >>>> >>>> I seem to be having trouble with the version of aklog that is included >>>> in package openafs-krb5-1.4.1-0.11.SL (I'm using SL 4.4). >>>> >>>> $ kinit >>>> Password for [user]@[REALM]: >>>> $ aklog >>>> aklog: Couldn't get [cell] AFS tickets: >>>> aklog: unknown RPC error (-1765328228) while getting AFS ticket >>>> >>>> I did a google search for this error, but all instances that I found >>>> had a different error code, and none of the suggestions worked for >>>> me. I consistently get the error code shown above on all machines on >>>> which I have tried. I consistently get the same problem on both >>>> i386 and x86_64 platforms. >>>> >>>> The AFS-related packages I have installed are as follows: >>>> >>>> $ rpm -qa | grep afs >>>> openafs-server-1.4.1-0.11.SL >>>> kernel-module-openafs-2.6.9-42.0.3.EL-1.4.1-0.11.SL >>>> krbafs-devel-1.2.2-6 >>>> openafs-client-1.4.1-0.11.SL >>>> kernel-module-openafs-2.6.9-42.0.8.EL-1.4.1-0.11.SL >>>> openafs-kpasswd-1.4.1-0.11.SL >>>> openafs-1.4.1-0.11.SL >>>> openafs-compat-1.4.1-0.11.SL >>>> krbafs-1.2.2-6 >>>> openafs-krb5-1.4.1-0.11.SL >>>> >>>> >>>> Interestingly, I tried using the aklog binary from an rpm I had >>>> built before my switch to SL, and it worked with no problems. >>>> >>>> Does anyone else have this problem or any ideas for a possible >>>> solution other than re-compiling aklog? >>>> >>>> Thanks, >>>> Mark >>> Hi Mark, >>> Have you restarted openafs since updating to the 1.4.1 version of >>> openafs? >>> And is AFS running? (I know it's a silly question, but that's usually >>> my problem when aklog doesn't work.) >>> >>> Troy > > -- > __________________________________________________ > Troy Dawson [log in to unmask] (630)840-6468 > Fermilab ComputingDivision/LCSI/CSI DSS Group > __________________________________________________ >