AFS not working after Upgrade to Debian 9

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












We are using Debian 8 and 9 with Gnome 3 / KDE 5, kerberos authentification and an AFS filesystem.



Debian 8 works fine, but after Upgrading some PCs to Debian 9 we have the following problem:



Gnome completly ignores the AFS-Tokens, this results in many errors when the user home is an AFS-directory (but login to gnome works). KDE cannot write some config after login, but starts. KDE programs (Dolphin and Konsole) have AFS-Rights, Gnome ones do not.



The KRB- and AFS-Tokens look fine:



Valid starting Expires Service principal
28.11.2017 10:10:10 29.11.2017 11:10:10 krbtgt/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10
28.11.2017 10:10:10 29.11.2017 11:10:10 afs/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10


Special case: gnome-terminal:



user@pc: klist #see foregoing results
user@pc: ls /afs/xyz.com/home/u/user
Permission denied

user@pc: aklog
user@pc: klist #no difference
user@pc: ls /afs/xyz.com/home/u/user #works!
[AFS Home Contents]


Other Applications do still not have permissions to view AFS-directories.



I am not really sure where to search for the problem. Maybe something related to pam? Any other ideas?







share|improve this question






















  • How the AFS FS is mounted?
    – Paradox
    Nov 28 '17 at 12:17










  • @Paradox I installed openafs and its automatically mounted in /afs
    – rbs
    Nov 28 '17 at 14:43














up vote
0
down vote

favorite












We are using Debian 8 and 9 with Gnome 3 / KDE 5, kerberos authentification and an AFS filesystem.



Debian 8 works fine, but after Upgrading some PCs to Debian 9 we have the following problem:



Gnome completly ignores the AFS-Tokens, this results in many errors when the user home is an AFS-directory (but login to gnome works). KDE cannot write some config after login, but starts. KDE programs (Dolphin and Konsole) have AFS-Rights, Gnome ones do not.



The KRB- and AFS-Tokens look fine:



Valid starting Expires Service principal
28.11.2017 10:10:10 29.11.2017 11:10:10 krbtgt/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10
28.11.2017 10:10:10 29.11.2017 11:10:10 afs/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10


Special case: gnome-terminal:



user@pc: klist #see foregoing results
user@pc: ls /afs/xyz.com/home/u/user
Permission denied

user@pc: aklog
user@pc: klist #no difference
user@pc: ls /afs/xyz.com/home/u/user #works!
[AFS Home Contents]


Other Applications do still not have permissions to view AFS-directories.



I am not really sure where to search for the problem. Maybe something related to pam? Any other ideas?







share|improve this question






















  • How the AFS FS is mounted?
    – Paradox
    Nov 28 '17 at 12:17










  • @Paradox I installed openafs and its automatically mounted in /afs
    – rbs
    Nov 28 '17 at 14:43












up vote
0
down vote

favorite









up vote
0
down vote

favorite











We are using Debian 8 and 9 with Gnome 3 / KDE 5, kerberos authentification and an AFS filesystem.



Debian 8 works fine, but after Upgrading some PCs to Debian 9 we have the following problem:



Gnome completly ignores the AFS-Tokens, this results in many errors when the user home is an AFS-directory (but login to gnome works). KDE cannot write some config after login, but starts. KDE programs (Dolphin and Konsole) have AFS-Rights, Gnome ones do not.



The KRB- and AFS-Tokens look fine:



Valid starting Expires Service principal
28.11.2017 10:10:10 29.11.2017 11:10:10 krbtgt/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10
28.11.2017 10:10:10 29.11.2017 11:10:10 afs/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10


Special case: gnome-terminal:



user@pc: klist #see foregoing results
user@pc: ls /afs/xyz.com/home/u/user
Permission denied

user@pc: aklog
user@pc: klist #no difference
user@pc: ls /afs/xyz.com/home/u/user #works!
[AFS Home Contents]


Other Applications do still not have permissions to view AFS-directories.



I am not really sure where to search for the problem. Maybe something related to pam? Any other ideas?







share|improve this question














We are using Debian 8 and 9 with Gnome 3 / KDE 5, kerberos authentification and an AFS filesystem.



Debian 8 works fine, but after Upgrading some PCs to Debian 9 we have the following problem:



Gnome completly ignores the AFS-Tokens, this results in many errors when the user home is an AFS-directory (but login to gnome works). KDE cannot write some config after login, but starts. KDE programs (Dolphin and Konsole) have AFS-Rights, Gnome ones do not.



The KRB- and AFS-Tokens look fine:



Valid starting Expires Service principal
28.11.2017 10:10:10 29.11.2017 11:10:10 krbtgt/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10
28.11.2017 10:10:10 29.11.2017 11:10:10 afs/xyz.com@XYZ.COM renew until 28.12.2017 10:10:10


Special case: gnome-terminal:



user@pc: klist #see foregoing results
user@pc: ls /afs/xyz.com/home/u/user
Permission denied

user@pc: aklog
user@pc: klist #no difference
user@pc: ls /afs/xyz.com/home/u/user #works!
[AFS Home Contents]


Other Applications do still not have permissions to view AFS-directories.



I am not really sure where to search for the problem. Maybe something related to pam? Any other ideas?









share|improve this question













share|improve this question




share|improve this question








edited Nov 28 '17 at 11:03

























asked Nov 28 '17 at 10:43









rbs

1035




1035











  • How the AFS FS is mounted?
    – Paradox
    Nov 28 '17 at 12:17










  • @Paradox I installed openafs and its automatically mounted in /afs
    – rbs
    Nov 28 '17 at 14:43
















  • How the AFS FS is mounted?
    – Paradox
    Nov 28 '17 at 12:17










  • @Paradox I installed openafs and its automatically mounted in /afs
    – rbs
    Nov 28 '17 at 14:43















How the AFS FS is mounted?
– Paradox
Nov 28 '17 at 12:17




How the AFS FS is mounted?
– Paradox
Nov 28 '17 at 12:17












@Paradox I installed openafs and its automatically mounted in /afs
– rbs
Nov 28 '17 at 14:43




@Paradox I installed openafs and its automatically mounted in /afs
– rbs
Nov 28 '17 at 14:43















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f407464%2fafs-not-working-after-upgrade-to-debian-9%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f407464%2fafs-not-working-after-upgrade-to-debian-9%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

How to check contact read email or not when send email to Individual?

Bahrain

Postfix configuration issue with fips on centos 7; mailgun relay