Re: kerberos/SP question

From: Lieberg, Patrick (plieberg@EV3.NET)
Date: Thu Nov 13 2003 - 10:26:34 EST


If you are only using K4, sometimes Kerberos will return K5 errors. We had this problem at my last company.

When I called IBM, they had me add a K5MUTE=1 line to /etc/environment and that supressed the errors.

Not sure if that is completely relevant here.

-Pat Lieberg
Systems Administrator
ev3 inc.

-----Original Message-----
From: Shawn Bierman [mailto:BiermanS@METHODISTHEALTH.ORG]
Sent: Thursday, November 13, 2003 9:06 AM
To: aix-l@Princeton.EDU
Subject: kerberos/SP question

I receive the following error every morning on a number of my SP nodes.

¯----------text-------------------
2502-604 Unable to determine the active authentication methods.
k4destroy: 2502-000 No tickets to destroy.

*****************************************************************
    cron: The previous message is the standard output
    and standard error of one of the cron commands.
¯----------text-------------------

I've looked up this error number in my PSSP Messages Reference manual and its explanation is:

"This information could not be read from file /spdata/sys1/spsec/auth_methods. This is probably a system error."

The resolution is "Follow normal problem reporting procedures". Not useful.

The file does truely does not exist. I've ran lsauthent and it shows "k4 and std" so the auth_methods seem defined. Is there something I've missed?

Something else important is that this started happening right after I did some AIX and PSSP upgrades (4.3 to 4.3.3 and PSSP 2.4 to 3.2)

Thanks for any ideas.
-shawn

_____________________________________________________________________
Message scanned for viruses

_____________________________________________________________________
This message has been checked for all known viruses



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 22:17:21 EDT