🚀 go-pugleaf

alan@curta.cc.columbia.edu (Alan Crosswell) writes:
>In article <1992Dec10.234739.9133@ericsson.se> monica@netman.ericsson.se  
>(Monica Bouchibane) writes:
>> I'm trying to include Moira (SMS) in our kerberized environment,
>> but I'm having some problems with the moira client(s)
>> 
>> The serverside seems to be running OK, but whenever I try to start
>> the client (moira, dcmmaint, listmaint....) I have mainly two things 
>> showing up.
>> .....moira: Kerberos error: Can't decode authenticator 
>> .....Authorization failed -- please run kinit
>> .....Exit 1
[...]
>Check for principal name 'moira' vs. 'sms.'  As I recall, there are a couple
>places in the code where these are used interchangeably.  This is probably
>because after the code had been called sms for a while, they decided to
>rename it Moira and some of the code still refers to it the old way.  The
>easy fix is to create two princpals: "moira.myserver" and "sms.myserver" with
>the same key.

I'm about 99% sure that the two principals needed are "moira.myserver" and
"sms" (null instance name), and that they don't need the same key at all.
"moira.myserver" is used for Moira client-server authentication, while "sms"
is used by the data control manager (DCM) to authenticate to hosts running
the update_server process (those hosts, in turn, need an "rcmd.hostname" key).

-Shawn Mamros
E-mail to: mamros@athena.lkg.dec.com