[9fans] apu/auth standalone..

[9fans] apu/auth standalone..

[Ish Rattan]

Hello,

I have been trying cpu/auth standalone server machine.

Did the steps in getting started (before the reboot).

Booted the machine, it boots (one message
	rc: null list in concatenation
and
	of course rio does not start)

machine seem ok, I can ftpfs/telnet out.

At auth/changeuser bootes (problem occurs, dialog shown below..)

Password: xxx
Confirm password: xxx
assign Inferno/POP secret (y/n) y
make it same as the plan9 passwd? (y/n) y
Expiration date(YYYYMMDD or never)[return=never]: <ret>
changeuser: can't create user bootes: access permission denied
%

Any ideas?

- ishwar

Re: [9fans] apu/auth standalone..

[Andrey Mirtchovski]

Ish Rattan wrote:

> Password: xxx
> Confirm password: xxx
> assign Inferno/POP secret (y/n) y
> make it same as the plan9 passwd? (y/n) y
> Expiration date(YYYYMMDD or never)[return=never]: <ret>
> changeuser: can't create user bootes: access permission denied
> %

I am having exactly the same problem with my install (it's a single
machine one). I managed to find out that I lack the $auth environment
var, which termrc sets from $sysname.

I edited locate in order for ndb/cs to be able to set $sysname but
I still get the permission denied problem.

Probably all you need to do is set $auth to the machine which will do
the authentication. Unfortunately though, having only a single computer
to dedicate to plan9 I can't experiment with different servers and am
stuck.

Andrey

Re: [9fans] apu/auth standalone..

[forsyth]

>>machine one). I managed to find out that I lack the $auth environment
>>var, which termrc sets from $sysname.

it is not an environment variable (if we are talking about the same thing).
it is a metaname interpreted by cs; see ndb(6).  very roughly, cs(8)
uses the value in the auth= entry closest to the host in question,
considering the network, subnet and host entries in the /lib/ndb
database files. see /lib/ndb/local.complicated for example and ndb(6),
but read the latter carefully.

Re: [9fans] apu/auth standalone..

[presotto]

[-- Attachment #1: Type: text/plain, Size: 184 bytes --]

Was keyfs running?  Was it mounted inthe namespace of the
session you were running it in?  Is /adm/keys owned by the
same user netkey was running as and the as you were running as?

[-- Attachment #2: Type: message/rfc822, Size: 1910 bytes --]

From: Ish Rattan <ishwar@pali.cps.cmich.edu>
To: 9fans@cse.psu.edu
Subject: [9fans] apu/auth standalone..
Date: Tue, 27 Jun 2000 11:13:38 -0400 (EDT)
Message-ID: <200006271513.LAA03345@pali.cps.cmich.edu>

Hello,

I have been trying cpu/auth standalone server machine.

Did the steps in getting started (before the reboot).

Booted the machine, it boots (one message
	rc: null list in concatenation
and
	of course rio does not start)

machine seem ok, I can ftpfs/telnet out.

At auth/changeuser bootes (problem occurs, dialog shown below..)

Password: xxx
Confirm password: xxx
assign Inferno/POP secret (y/n) y
make it same as the plan9 passwd? (y/n) y
Expiration date(YYYYMMDD or never)[return=never]: <ret>
changeuser: can't create user bootes: access permission denied
%

Any ideas?

- ishwar

Re: [9fans] apu/auth standalone..

[Ish Rattan]

presotto@plan9.bell-labs.com wrote:

> Was keyfs running?  Was it mounted inthe namespace of the
> session you were running it in?  Is /adm/keys owned by the
> same user netkey was running as and the as you were running as?

Well, I am afraid that  I have no answers to the questions. I followed the
steps in
`Configuring a standlone cpu/authentication server' in the document `Getting
started
with Plan9'. I have tried a number of times without success.

Things go haywire with

auth/changeuser bootes

as noted earlier.

- ishwar

Re: [9fans] apu/auth standalone..

[miller]

Ish Rattan <ishwar@pali.cps.cmich.edu> writes:

	I have been trying cpu/auth standalone server machine.
	Did the steps in getting started (before the reboot).
	Booted the machine, it boots (one message
		rc: null list in concatenation

This message goes away if you insert after 'ndb/cs' in /rc/bin/cpurc:

  sysname=`{cat /dev/sysname}


-- Richard Miller

Re: [9fans] apu/auth standalone..

[presotto]

I'll assume that you edited out the '#'s in the cpurc and rebooted,
using a user/hostid for the cpu server to run as.  Let's call
that id 'xyzzy'.

The auth server is now up, and depdnding on what you did is either
running rio or is in line at a time mode.  I suggest the former
since it's easier to debug in.

Do the following:

cat /dev/user
ls -l /adm/keys
ps|grep keyfs
ls -l /mnt/keys

I'm assuming /dev/user is 'xyzzy'.  If /adm/keys is not also
owned by xyzzy or it's group isnot one which includes xyzzy,
then I understand your problem.  You should run
	disk/kfscmd allow
and then remove and recreate /adm/keys.

if  the ps shows keyfs not running or the ls -l /mnt/keys
produces an error, they you're not getting it started in
cpurc.