[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference smurf::buildhelp

Title:USG buildhelp questions/answers
Moderator:SMURF::FILTER
Created:Mon Apr 26 1993
Last Modified:Mon Jan 20 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:2763
Total number of notes:5802

1788.0. "Re: my ODE problem of the day (ATM shared sandbox)" by AOSG::FILTER (Automatic Posting Software - mail to flume::puck) Fri Sep 01 1995 18:35

Date Of Receipt: 	 1-SEP-1995 13:25:07.86
From: 	SMURF::WASTED::jmf "Joshua M. Friedman OSF/UNIX SDE"
To: 	ftw@zk3.dec.com, ode@zso.dec.com
CC: 	odehelp@DEC:.zko.wasted, schulter@DEC:.zko.wasted
Subj: 	Re:  my ODE problem of the day (ATM shared sandbox)

DECwest, can you please look into this problem of Farrell's?  It could 
have to do with two addresses for his workstation - this has caused
problems in the past.  Thanks...     -josh

p.s. I've confirmed the server's running ok on labrea:

% ps auxww | grep ode_
jmf       4114  0.0  0.2 1.33M 168K ttyp4    S  + 13:19:22     0:00.01 grep ode_
root       495  0.0  0.1  680K  96K ??       I      Aug 17     0:02.11 /usr/sbin
/ode_server3.0 -t /usr/sde/ode3.0/tools -p 549
root       499  0.0  0.1  680K  96K ??       I      Aug 17     0:00.20 /usr/sbin
/ode_server3.0 -t /usr/sde/ode3.0/tools -p 549
% hostname
labrea.zk3.dec.com
%

-----
To: odehelp@marvin.zk3.dec.com
Cc: schulter@marvin.zk3.dec.com
Subject: my ODE problem of the day
Reply-To: ftw@zk3.dec.com
Date: Fri, 01 Sep 95 11:19:00 -0400
From: Farrell Woods <ftw@zk3.dec.com>

Why do I get yelled at about not having a ticket when I access the ATM shared
sandbox, and not when I access my platinum sandbox.  I have a valid ticket.

0.244 marvin:ftw> workon
cd'ing to sandbox source directory: /x3/sandboxes/newatm/src.
starting new shell: /bin/tcsh.
To access your ODE server you must:

        o kinit $PRINCIPAL (then input your kerberos password)

        o Enter workon -sb sandbox name or default.

Please obtain kerberos ticket and try again.

Check: environment $BCSPORT, and ode_server daemon @ labrea.zk3.dec.com
Please exit workon, do a kinit and enter workon.
1.201 marvin:ftw> klist
Ticket file:    /var/dss/kerberos/tkt/tkt1115
Principal:      Farrell_Woods@ZONE

  Issued           Expires          Principal
Sep  1 11:10:36  Sep  1 21:10:36  krbtgt.ZONE@ZONE
Sep  1 11:10:46  Sep  1 21:10:46  kxct.secret@ZONE
Sep  1 11:10:47  Sep  1 21:10:47  kxct.buffer@ZONE
Sep  1 11:15:36  Sep  1 21:10:36  kxct.labrea@ZONE
1.202 marvin:ftw> workon -sb ptos
cd'ing to sandbox source directory: /x3/sandboxes//ptos/src.
starting new shell: /bin/tcsh.
2.201 marvin:ftw>



	-- Farrell




T.RTitleUserPersonal
Name
DateLines
1788.1Re: my ODE problem of the day (ATM shared sandbox)AOSG::FILTERAutomatic Posting Software - mail to flume::puckFri Sep 01 1995 18:4316
Date Of Receipt: 	 1-SEP-1995 13:48:51.43
From: 	SMURF::WASTED::"help_ode@zso.dec.com" "01-Sep-1995 1047"
To: 	ftw@zk3.dec.com
CC: 	odehelp@zk3.dec.com, schulter@zk3.dec.com
Subj: 	Re: my ODE problem of the day (ATM shared sandbox)

hi farrell,


would you do and sbinfo on both sandboxes, the one that gives you the
error message and the one that let's you in.

send me what you get.

jo

1788.2Re: my ODE problem of the day (ATM shared sandbox)AOSG::FILTERAutomatic Posting Software - mail to flume::puckFri Sep 01 1995 21:0751
Date Of Receipt: 	 1-SEP-1995 16:16:31.45
From: 	SMURF::ALPHA::"help_ode@zso.dec.com" "01-Sep-1995 1314"
To: 	ftw@zk3.dec.com
CC: 	odehelp@zk3.dec.com
Subj: 	Re: my ODE problem of the day (ATM shared sandbox)

hi farrell,

i think this is the same situation with kerberos dealing with 2 network 
interfaces.

marvin	16.140.32.161  also known as 
pyrite	16.140.64.134

buffer, the rcs host, also kerberos1 is the slave where the kinit is going.

as the kinit -d on marvin shows

% kinit -d Josephine_Fujii
Kerberos Initialization for "Josephine_Fujii"
lrealm is ZONE
krb_udp_port is 60930
Getting host entry for kerberos1.zk3.dec.com...Got it.
Sending message to 16.140.112.22...Sent
Waiting for reply...received packet from 16.140.112.22
Received it
Clen is 88
Password:


the problem arises when it tries to authenticate and labrea, the submit server,
because "marvin" goes out as "pyrite" to get to labrea.

i don't have access to the servers so i can't look at the kerberos.log
in labrea or secret or buffer to verify this.

i do see the routing info on marvin and it has this

green-net        marvin             U          46  1536175  ln0
red-net          pyrite             U           2     2782  fta0

i don't know what green-net and red-net resolve to but it leads me to think
that this is what's happening.

would someone check?

access to secret, the source_host, is not a problem because it is on the
same subnet as buffer.

jo

1788.3Re: my ODE problem of the day (ATM shared sandbox)AOSG::FILTERAutomatic Posting Software - mail to flume::puckFri Sep 01 1995 22:1883
Date Of Receipt: 	 1-SEP-1995 17:15:15.80
From: 	SMURF::WASTED::"help_ode@zso.dec.com" "01-Sep-1995 1413"
To: 	ftw@zk3.dec.com
CC: 	odehelp@zk3.dec.com, jmf@zk3.dec.com
Subj: 	Re: my ODE problem of the day (ATM shared sandbox)

hi farrell,

did the shared sandbox ptatm always have the following setup?

   rcs_host: buffer.zk3.dec.com
   submit_host: labrea.zk3.dec.com
   source_host: secret.zk3.dec.com

the different submit_host and source_host is raising a red flag over here.
was it always like this?

anyway, more evidence on the kerberos problem.

tina and i used her account because her home directory was mounted and 
logged into marvin.  created a sandbox backed to ptatm and promptly got 
the message you were getting.

we set the environment variable ODE_DEBUG to cvs

and here's what we got after a kinit was done.


------------

0.49 marvin:tea> setenv ODE_DEBUG cvs
0.50 marvin:tea> workon -sb test
cd'ing to sandbox source directory: /home/tea/test/src.
starting new shell: /bin/tcsh.
ODE CLIENT:

        ********** ODE_CLIENT START **********
ODE CLIENT: DEBUG Mode [CLIENT,SERVER,]
ODE CLIENT: /usr/sde/ode3.0/tools/alpha_UNIX/lib/ode_client authriz_client
ODE CLIENT: SERVER Host =labrea.zk3.dec.com
ODE CLIENT: SERVER Pool =pool
ODE CLIENT: POOL   Owner=DECode
ODE CLIENT: BCSTEMP=(null)
ODE CLIENT: CLIENT SOCKET ADDRESS = 549
ODE CLIENT: ---- SOCKET CONNECTIONS OK ----.
ODE CLIENT: ---- SENDING REMOTE COMMAND LIST TO THE SERVER ----
ODE CLIENT: ---- SENDING AUTHORIZATION ----
ODE CLIENT: Sending KERBEROS Authentication
        ODE_SERVER: ==== SOCKET CONNECTIONS OK ====
        ODE_SERVER: ==== RECEIVEING REMOTE COMMAND LIST ====
        ODE_SERVER: principal name is Tina_Anderson
        ODE_SERVER: ode file pool pool, tree_owner is DECode
        ODE_SERVER: ==== REMOTE COMMAND LIST OK ====


        ODE_SERVER: ==== REMOTE COMMAND LIST OK ====
        ODE_SERVER: ==== CHECKING AUTHORIZ       ODE_SERVER: ==== REMOTE COMMAND LIST OK ====
        ODE_SERVER: ==== CHECKING AUTHORIZATION ====
        ODE_SERVER: Receiveing kerberos authentication
        ODE_SERVER: kerberos authentication error: Incorrect network address (kr
b_rd_req)
ODE CLIENT: ODE_CLIENT Error: kerberos Authentication :(reserved)


To access your ODE server you must:

        o kinit $PRINCIPAL (then input your kerberos password)

        o Enter workon -sb sandbox name or default.

Please obtain kerberos ticket and try again.

Check: environment $BCSPORT, and ode_server daemon @ labrea.zk3.dec.com
Please exit workon, do a kinit and enter workon.

---------

the "Incorrect network address" is the error message we used to get
due to the 2 network addresses.  note that the SERVER Host is labrea
which is on subnet 64, same as pyrite the second interface to marvin.

jo