[9fans] Stupid question...

[9fans] Stupid question...

[Eric Van Hensbergen]

Haven't run into this scenario before myself, so I'm not quite sure
how to get out of it.

I just installed a new virtual standalone CPU server on my home
machine.  I followed the instructions on the wiki for standalone
cpu/auth.

I'm drawterming in this case from a windows box.  I can drawterm in as
bootes, but when I try to drawterm in as my user account I get
cpu: cannot get auth tickets in p9sk1: The operation completed successfully.

What step did I miss?

           -eric

Re: [9fans] Stupid question...

[Jeff Sickel]

On Nov 15, 2008, at 10:55 AM, Eric Van Hensbergen wrote:

> Haven't run into this scenario before myself, so I'm not quite sure
> how to get out of it.
>
> I just installed a new virtual standalone CPU server on my home
> machine.  I followed the instructions on the wiki for standalone
> cpu/auth.
>
> I'm drawterming in this case from a windows box.  I can drawterm in as
> bootes, but when I try to drawterm in as my user account I get
> cpu: cannot get auth tickets in p9sk1: The operation completed
> successfully.
>
> What step did I miss?

you /lib/ndb has the loopback interface and auth settings for your
virtual net?

I remember putting in something like the following on my VMWare
instance (:

ipnet=vmnet ip=192.168.254.0 ipmask=255.255.255.0
	auth=vm
	cpu=vm
	fs=vm
	bootf=/386/9pc
	dns=192.168.254.2
	dnsdom=YOURDOMAIN
authdom=YOURDOMAIN auth=vm

ip=192.168.254.105 sys=vm ether=VIRTETHER
	dom=YOURDOMAIN



VMWare created it's NAT'd address on 192.168.254.X

So I also do the following to ease the pain:

[home:~] jas% cat `which cpu`
#!/usr/local/plan9/bin/rc

if(! ~ $#* 1){
	echo 'usage: cpu <user>'
	exit usage
}

drawterm -a 192.168.254.105 -c 192.168.254.105 -u $1


-jas

Re: [9fans] Stupid question...

[Eric Van Hensbergen]

On Sat, Nov 15, 2008 at 11:12 AM, Jeff Sickel <jas@corpus-callosum.com> wrote:
>
> you /lib/ndb has the loopback interface and auth settings for your virtual
> net?
>

I am actually using a bridged virtual network, so I shouldn't have to
configure different NAT stuff.
Also wouldn't explain why drawterm as bootes works, but not as ericvh.

         -eric

Re: [9fans] Stupid question...

[Eric Van Hensbergen]

gabi found it.  There was a typo in my cpurc that wasn't starting the
auth server listen.
auth/debug was most useful in helping find it.

                 -eric


On Sat, Nov 15, 2008 at 11:21 AM, Eric Van Hensbergen <ericvh@gmail.com> wrote:
> On Sat, Nov 15, 2008 at 11:12 AM, Jeff Sickel <jas@corpus-callosum.com> wrote:
>>
>> you /lib/ndb has the loopback interface and auth settings for your virtual
>> net?
>>
>
> I am actually using a bridged virtual network, so I shouldn't have to
> configure different NAT stuff.
> Also wouldn't explain why drawterm as bootes works, but not as ericvh.
>
>         -eric
>

Re: [9fans] Stupid question...

[Nathaniel W Filardo]

[-- Attachment #1: Type: text/plain, Size: 430 bytes --]

On Sat, Nov 15, 2008 at 11:55:38AM -0600, Eric Van Hensbergen wrote:
> gabi found it.  There was a typo in my cpurc that wasn't starting the
> auth server listen.
> auth/debug was most useful in helping find it.
> 
>                  -eric
[snip]
> > Also wouldn't explain why drawterm as bootes works, but not as ericvh.

Given that you weren't running the auth server, how was logging in as bootes
working?

--nwf;

[-- Attachment #2: Type: application/pgp-signature, Size: 204 bytes --]

Re: [9fans] Stupid question...

[andrey mirtchovski]

> Given that you weren't running the auth server, how was logging in as bootes
> working?

both factotums already contained the auth keys for the user bootes so
the authentication code probably short-circuited the auth process. i'm
away from a plan9 installation so i can't verify with actual code.
Russ can correct me if i'm wrong, but i believe it's by design.

Re: [9fans] Stupid question...

[Nathaniel W Filardo]

[-- Attachment #1: Type: text/plain, Size: 682 bytes --]

On Sat, Nov 15, 2008 at 11:30:05AM -0700, andrey mirtchovski wrote:
> > Given that you weren't running the auth server, how was logging in as bootes
> > working?
> 
> both factotums already contained the auth keys for the user bootes so
> the authentication code probably short-circuited the auth process. i'm
> away from a plan9 installation so i can't verify with actual code.
> Russ can correct me if i'm wrong, but i believe it's by design.

Interesting.  Having gone an RTFS, it seems that the client factotum will
attempt to synthesize tickets iff the auth server cannot be reached or is
unknown and the uids on the server and client are equal.

Thanks.
--nwf;

[-- Attachment #2: Type: application/pgp-signature, Size: 204 bytes --]

Re: [9fans] Stupid question...

[john]

> gabi found it.  There was a typo in my cpurc that wasn't starting the
> auth server listen.
> auth/debug was most useful in helping find it.
>
>                  -eric
>

I tend to hit this problem every time I configure a CPU server...  I
must get some sort of situational blindness when I reach that part of
the wiki page.

John