supergrover $ ./aklog -d
Authenticating to cell coyhile.com (server supergrover).
We've deduced that we need to authenticate using referrals.
Getting tickets: afs/coyhile.com@
Using Kerberos V5 ticket natively
About to resolve name hile@COYHILE.COM to id in cell coyhile.com.
Id 32766
doing first-time registration of hile@coyhile.com at coyhile.com
aklog: Permission denied so unable to create remote PTS user hile@coyhile.com in cell coyhile.com (status: 267269).
Set username to hile@coyhile.com
Setting tokens. hile@coyhile.com / @ COYHILE.COM
supergrover $ ./unlog
supergrover $ ./aklog -d -c coyhile.com -k COYHILE.COM
Authenticating to cell coyhile.com (server supergrover).
We were told to authenticate to realm COYHILE.COM.
Getting tickets: afs/coyhile.com@COYHILE.COM
Using Kerberos V5 ticket natively
About to resolve name hile to id in cell coyhile.com.
Id 1000
Set username to AFS ID 1000
Setting tokens. AFS ID 1000 / @ COYHILE.COM
supergrover $
[libdefaults]
default_realm = COYHILE.COM
default_keytab_name = /opt/krb5/etc/krb5.keytab
[realms]
COYHILE.COM = {
kdc = kerberos.coyhile.com
kdc = kerberos-1.coyhile.com
admin_server = keymaster.coyhile.com
}
[domain_realm]
.coyhile.com = COYHILE.COM
supergrover.coyhile.com = COYHILE.COM
[logging]
default = FILE:/opt/krb5/var/krb5kdc/kdc.log
kdc = FILE:/opt/krb5/var/krb5kdc/kdc.log
kdc_rotate = {
# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.
period = 1d
# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)
versions = 10
}