[9fans] auth fun+games

[9fans] auth fun+games

[steve.simon]

Up until now I have been working with a single plan9 machine,
I tried to attach another and am struggling with authentication.

I have 2 kfs terminals, both booting off their own kfs disks.
The desktop machine is temporarly running 'disk/kfscmd listen',
and the listeners & keyfs detailed in cpurc.

I am just trying to 9fs from the laptop to the desktop machine.

On the desktop box I gave myself a password with auth/changeuser,
giving the keyfs password again as I have no nvram partition yet.
I setup /lib/ndb so both machines know what authdomain they are
in and where their auth server is.

At one point I am sure I could generate tickets using auth/debug,
however now I just get:
 p9sk1 key: proto=p9sk1 dom=snellwilcox.com user=steve !password?
	 successfully dialed auth server
	 password for steve@snellwilcox.com [hit enter to skip test]:
	 cannot decrypt ticket1 from auth server (bad t.num=0xffffff9f)
	 auth server and you do not agree on key for steve@snellwilcox.com

I have retyped the passwords several times but still get errors.

I am running the current distribution's kernels.

I have missed somthing but I cannot see what...

-Steve

Re: [9fans] auth fun+games

[Lucio De Re]

On Tue, May 27, 2003 at 04:38:31PM +0100, steve.simon@snellwilcox.com wrote:
>
> Up until now I have been working with a single plan9 machine,
> I tried to attach another and am struggling with authentication.
>
The quick reply is to try

	% auth/debug

which I was thrilled to discover actually highlights a lot of
misunderstandings.

But I only skimmed over your note, so you may need deeper digging.
Setting

	% echo debug > /mnt/factotum/ctl

(and debug off when you're overwhelmed :-) also can help.  But use
/dev/kcons to catch the output, if you can.

Good luck.

++L

Re: [9fans] auth fun+games

[ron minnich]

I went through fun and games too.

one thing I can tell you is to make sure you follow the instructions on
the wiki EXACTLY. I screwed this up a countably infinite number of times.

Dean's pages on the acl plan 9 site are also very helpful.

ron

Re: [9fans] auth fun+games

[andrey mirtchovski]

On Tue, 27 May 2003 steve.simon@snellwilcox.com wrote:

> Up until now I have been working with a single plan9 machine,
> I tried to attach another and am struggling with authentication.
>

in my case it has always been the 'dom=' and 'authdom=' entries in /net/ndb
-- make sure they match on both sides.

as has been suggested, auth/debug is your friend :)