AFS: Passwords aren't consistent with root.

[acpuck1]

We use a Linux server with AFS on it. I changed the linux root password using passwd. The new password will let me log in as root but when I try to change the AFS admin password it asks for the root password. When I put in the password that it let me log in as root. It tells me authentication failed. And when I run the password command with -admin admin, it asks for the admin password. I put in the admin password that worked before I changed the root and it says authorization failed.

[jpollard]

It isn't using the local root password. It is using a root password for Kerberos.

Totally different thing.

Make sure you are using the correct password program. I've seen difficulties where
the Kerberos password program was installed and named "passwd". This has
been known to cause confusion. (The linux passwd program doesn't have "-admin"
as an option.)

It has been a while, but I think the "root" AFS password is the admin password.

Also - you can/will get an AFS authorization failed message if the login needs
AFS access, but didn't get it during login - try running aklog manually and see
what happens.

Normally, root (the Linux one) doesn't/shoudn't get AFS credentials. It can, but you
would have to use kinit to get a Kerberos TGT (a user credential), then use aklog to
get user level AFS access.

Using su to the local root can pass user credentials to root (depending on the
Kerberos implementation used), but doesn't have to.

[acpuck1]

Thanks for the quick answer!

Then why does the old admin password not work anymore?

I was able to use the password that was set before I took this job before I changed root on the server.

[jpollard]

You might check:

http://docs.openafs.org/AdminGuide/ch12s03.html

to see if something there sounds familiar to your problem. It is possible that when
the passwd entry changed, it changed something that should have been consistent
with the afs identity system.

[acpuck1]

Ok, so I guess my real question is:

How do I reset or find my AFS admin password?

[jpollard]

Try reading over

http://en.gentoo-wiki.com/wiki/OpenA...h_MIT_Kerberos

From it, the AFS admin is a Kerberos administrator - it needs to be able to create
principals for hosts and for the AFS cell.

And unless somebody wrote it down, you won't find an AFS password - they are
stored only as encrypted entries. It will take a Kerberos administrator to change
the password.