sphenix-l AT lists.bnl.gov

Subject: sPHENIX is a new detector at RHIC.

List archive

[Sphenix-l] one more thing for the afs tokens

From: pinkenburg <pinkenburg AT bnl.gov>
To: "sphenix-l AT lists.bnl.gov" <sphenix-l AT lists.bnl.gov>, PHENIX Current Participants <phenix-p-l AT lists.bnl.gov>
Subject: [Sphenix-l] one more thing for the afs tokens
Date: Tue, 11 Dec 2018 17:16:55 -0500

Hi folks,

if you are getting an afs token now via

kinit
aklog

but if you still have an old kerberos token, you will get a failure durign the aklog. Kerberos tokens have a lifetime of a week and they were not invalidated by todays changes in rcf. If kinit asks you for a password using <username>.RHIC.BNL.GOV you still have an old token. You need to get rid of it by "kdestroy" and then run kinit again which then should ask you for the password for <username>.SDCC.BNL.GOV after which the aklog should succeed.

These tokens are stored on the local /tmp disk (means every rcas machine has their own kerberos token, removing it on one machine will not affect other rcas nodes).

Chris

--
*************************************************************

Christopher H. Pinkenburg ; pinkenburg AT bnl.gov
; http://www.phenix.bnl.gov/~pinkenbu

Brookhaven National Laboratory ; phone: (631) 344-5692
Physics Department Bldg 510 C ; fax: (631) 344-3253
Upton, NY 11973-5000

*************************************************************

[Sphenix-l] one more thing for the afs tokens, pinkenburg, 12/11/2018