UNKNOWN_SERVER - Server not ,found in Kerberos database

[Russ Allbery]

Jeff Blaine <jblaine at kickflop.net> writes:

> Can anyone tell me what is going on here?  This is what
> krb5kdc logged when I logged into 129.83.11.213.

> -- sshd + UsePAM
> -- pam_krb5.so (RHELv4)
> -- pam_afs_session.so (PAM session module which uses aklog to
>     get tokens from a K5 ticket).

> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
> etypes {3}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
> jblaine at rcf.foo.com for afs/rcf.foo.com at rcf.foo.com, Server not
> found in Kerberos database

> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
> etypes {1}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
> jblaine at rcf.foo.com for afs/rcf.foo.com at rcf.foo.com, Server not
> found in Kerberos database

> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
> etypes {1}) 129.83.11.213: ISSUE: authtime 1176929167, etypes {rep=16
> tkt=1 ses=1}, jblaine at rcf.foo.com for afs at rcf.foo.com

This looks normal to me.  aklog tries the afs/<cell> principal first, and
when it doesn't work, falls back on the older afs@ principal.  Is anything
not working, or were you just wondering about the log messages?

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>