I am attempting to get OpenAFS running using Kerberos 5 for authentication on my gentoo machine. (So I can do kinit aklog to login to my AFS volumes which require this.) There is no way in the ebuild to specify to build and install aklog. Reproducible: Always Steps to Reproduce: 1. 'emerge openafs' 2. 'emerge kbr' 3. kinit 4. aklog Actual Results: aklog command not found. Expected Results: Logged into afs using the ticket aquired with kinit.
It tunrs out that aklog comes in a separate source tree. When I figure out where that source code lives I will try to write an ebuild for it.
Changing the title since really support for this is from the migration kit located at: ftp://ftp.cmf.nrl.navy.mil/pub/kerberos5/afs-krb5-1.3.tar.gz
Please check version 2.0 of the migration kit. Compiles _much_ better on my system!
assigning to our AFS guy, rphillips
Created attachment 84176 [details] Incomplete ebuild for only installing heimdal utilities, to allow establishing an OpenAGS server with mit-krb5. I've got /usr/bin/aklog as provided by net-fs/openafs-1.4.0-r3 here (emerged with USE="kerberos")... But I'm using Heimdal. However, when first establishing an OpenAFS server, either Heimdal's ktutil or the afs-krb5 asetkey program is necessary. I prefer ktutil, myself, so here
(In reply to comment #5) > Created an attachment (id=84176) [edit] > Incomplete ebuild for only installing heimdal utilities, to allow establishing > an OpenAGS server with mit-krb5. > > I've got /usr/bin/aklog as provided by net-fs/openafs-1.4.0-r3 here (emerged > with USE="kerberos")... But I'm using Heimdal. > > However, when first establishing an OpenAFS server, either Heimdal's ktutil or > the afs-krb5 asetkey program is necessary. I prefer ktutil, myself, so here > Note that the ebuild is incomplete and hackish. It shouldn't clash with mit-krb5, but the kadmin.heimdal it installs also doesn't work because I'm too lazy. To copy the Kerberos 5 AFS key into an AFS keyfile: kadmin> ext -k mykeytab.keytab afs/cell@REALM ktutil.heimdal copy mykeytab.keytab AFSKEYFILE:/etc/openafs/server/KeyFile You don't ever need to run "bos addkey" or use the clunky asetkey program. Just leave it to Heimdal. Make sure not to accidentally increment the kvno with ktutil, though...
Either find a maintainer, or if you want to maintain it yourself, feel free to reopen and join project sunrise, details here: http://www.gentoo.org/proj/en/sunrise Thanks. WONTFIX.