2008-02-29 Kerberos Woes

I’m trying to use HCoop. They use the Andrew File System (AFS). This requires Kerberos. From a user perspective, it complicates things, because we’re not really getting rid of Unix logins, we’re just adding another layer.

HCoop

From my local machine (Pyrobombus), I ssh to the remote machine (Mire), and provide my password. Everything works. I can’t make this passwordless by creating the appropriate files in `~/.ssh` on Mire because of Kerberos.

I can try to get a single ticket (requiring my password), and then not use passwords for a while. For that to work, I run kinit alex@HCOOP.NET and then I use ssh to connect to Mire.

Except that this still won’t work. I will get a permission denied error as I log in because `~/.bash_profile` cannot be read. I need to run aklog manually to “fix” this.

Apparently I also need the folling `~/.ssh/config` file on my local machine, pyrobombus:

Host mire.hcoop.net
  GSSAPIAuthentication yes
  GSSAPIDelegateCredentials yes
  User alex

I’m not happy.

the maintenance script

manual pages on running unattended commands

2008-03-22 Kerberos Again

For the time being, I much prefer EggplantFarms in terms of setup. Then again, EP’s uptime has not been so cool.

EggplantFarms

​#HCoop ​#Kerberos

Comments

(Please contact me if you want to remove your comment.)

Hi, Alex. Really many thanks, I just installed oddmuse wiki. Actually I know little about technology, but I found your instructions clear and helpful.

I want to have a private wiki, to better organize my documents, and I am happy to find it can also be a private diary with the blog module. Just some minor points, when I use the ’wiki’ way to add new pages, they will not be found in the blog calendar. And the blog calendar cannot be displayed correctly in IE7, it is fine with firefox. Compared to what I have got from oddmuse, these are really not that important. I really want to say a million thanks to you!

I appreciate the idea of seperating modules from the main code. And, I am very happy to note you have multi lingual in your mind from the very beginning. I am Chinse, and I use simplified Chinese a lot.

Thank you very much, Alex!

– Sarah 2008-03-01 18:19 UTC

---

BTW, how could I change the time setting? For I am now in HK, and it is 8 hours earlier. Thank you!

– Sarah 2008-03-01 18:20 UTC

---

Hi Sarah. I’m glad you find the instructions useful. I always worry that they might be too confusing.

The blog calendar depends on the pagename starting with a date like “2008-02-28...” – if you just create a page X, then Oddmuse will not know to what day it belongs. If you want a page to appear at a certain date in your calendar, you just need to name it appropriately. I guess you could always create a page called 2008-02-28_X which does nothing but `#REDIRECT [[X]]` – then you get the best of both worlds.

As for the display problem with IE 7 I really cannot help you because I don’t have it anywhere. I assume that the problem is the CSS. You would need to find somebody who can help you with CSS woes. You might want to contact Radomir Dopieralski (he’s listed on Oddmuse:Consultants) – he has turned out to be an excellent source of CSS expertise.

Oddmuse:Consultants

If you don’t want to use UTC, and you live in the same timezone as your server, then you might want to use the Oddmuse:Localtime Extension.

Oddmuse:Localtime Extension

– Alex Schroeder 2008-03-02 15:56 UTC

Alex Schroeder

---

Many thanks, Alex! It’s really very kind of you! =)

Wish you all the best with your life and work!

– Sarah 2008-03-03 16:48 UTC