Quanah Gibson-Mount via RT writes: > There was a size change in some variable between krb5-1.2.8 and krb5-1.3 > which broke our ability to generate an AFS token from the kerberos > ticket cache. > Using the krb5-1.2.8 kinit: > K4 cache: > tru64-build:~> ls -l /tmp/tkt54046 > -rw------- 1 quanah root 236 Feb 3 18:20 /tmp/tkt54046 > Using the krb5-1.3.6 kinit: > K4 cache: > ls -l /tmp/tkt54046 > -rw------- 1 quanah root 147 Feb 3 18:21 /tmp/tkt54046 The first one above is with an AFS service ticket while the second one does not have an AFS service ticket. The possibly more useful difference without that change is: -rw------- 1 rra root 132 Feb 3 19:35 /tmp/tkt11857 -rw------- 1 rra root 136 Feb 3 19:36 /tmp/tkt11857 suspiciously four bytes too long. Quanah, you may want to make sure that in the process of fixing the uint64_t thing you didn't use a long long somewhere that you didn't want to, or a long somewhere that an int should be, but it might be another issue. > The worthless error from aklog is: > aklog: Failed getting tokens for cell (local cell) in realm (local realm). And by aklog, we mean the KTH afslog program. -- Russ Allbery (rra@stanford.edu)