Disable AFS ticket provision when running kinit

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Disable AFS ticket provision when running kinit

Adam Lewenberg
I notice that when I do a "kinit username", after the password is
accepted the kinit client attempts to get a kerberos ticket for the AFS
service. This is, I am assuming, because of the OpenAFS client running
on the server.

Short of stopping the OpenAFS client, is there a way I can run kinit so
that it does not try to provision this AFS ticket?

kinit is version 7.1.0

Reply | Threaded
Open this post in threaded view
|

Re: Disable AFS ticket provision when running kinit

Jeffrey Altman-2
On 1/31/2018 6:12 PM, Adam Lewenberg wrote:

> I notice that when I do a "kinit username", after the password is
> accepted the kinit client attempts to get a kerberos ticket for the AFS
> service. This is, I am assuming, because of the OpenAFS client running
> on the server.
>
> Short of stopping the OpenAFS client, is there a way I can run kinit so
> that it does not try to provision this AFS ticket?
>
> kinit is version 7.1.0
>
Heimdal kinit does not perform "afslog" functionality unless it has been
instructed to either by a command line switch or an krb5.conf
configuration setting.

Jeffrey Altman



smime.p7s (5K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Disable AFS ticket provision when running kinit

Harald Barth-2

>> Short of stopping the OpenAFS client, is there a way I can run kinit so
>> that it does not try to provision this AFS ticket?

kinit --no-afslog

AFAIK all the long options can be reversed with --no...

> Heimdal kinit does not perform "afslog" functionality unless it has been
> instructed to either by a command line switch or an krb5.conf
> configuration setting.

All the heimdal kinit I've been using all the years by default
try to grab an AFS service ticket if AFS is detected. I never
had to enable something in krb5.conf for that.

Harald.
Reply | Threaded
Open this post in threaded view
|

Re: Disable AFS ticket provision when running kinit

Adam Lewenberg


On 1/31/2018 10:57 PM, Harald Barth wrote:
>
>>> Short of stopping the OpenAFS client, is there a way I can run kinit so
>>> that it does not try to provision this AFS ticket?
>
> kinit --no-afslog

That solved the problem nicely. Thanks!

Adam

>
> AFAIK all the long options can be reversed with --no...
>
>> Heimdal kinit does not perform "afslog" functionality unless it has been
>> instructed to either by a command line switch or an krb5.conf
>> configuration setting.
>
> All the heimdal kinit I've been using all the years by default
> try to grab an AFS service ticket if AFS is detected. I never
> had to enable something in krb5.conf for that.
>
> Harald.
>