Monday, 5 January 2009

CERN move to kerberos 5

With CERN disabling kerberos 4 access, users are required to use kerberos 5 and the gserver CVSROOT: :gserver:isscvs.cern.ch:/local/reps/atlas

Sites with SL4 development machines may see this error when checking out source code:

cvs [checkout aborted]: error from server isscvs.cern.ch: cvs [pserver aborted]: GSSAPI authentication failed: dbsrvd247.cern.ch Miscellaneous failure/Unknown code krb5 144

This is due to a bug in CVS, seen because CERN has 3 machines behind the host isscvs.cern.ch, you authenticate to one machine but fail to get files from another.

Sysadmins may wish to upgrade CVS using the CERN-patched version here. This appears to work fine on plain SL4 boxes.