Hi Don,

On Wed, Jan 20, 2010 at 08:22:58PM -0800, root wrote:
> [root_at_sandbox3 ~]# ctokens 
> 
> Tokens [local user id: root] 
> 
> [root_at_sandbox3 ~]# clog -method kerberos5 coda_admin_user_at_coda.realm 
> -tokenserver sandbox2.host.domain 370 -krealm KERBEROS.REALM -kdc 
> sandbox2.host.domain -servprinc coda/coda.realm
> Password for coda_admin_user/default_at_coda.realm:
> [root_at_sandbox3 ~]# ctokens 
> 
> Tokens [local user id: root] 
> 
> [root_at_sandbox3 ~]# ls /coda/

That looks bad. You should see a token but there is nothing?

> So, no errors on clog!  Progress! 

Not as much, unfortunately :)

> why can't I see /coda/coda.realm? 

Normally you do not see a Coda realm until you supply its name to "ls",
but clog is usually sufficient to make it appear.

Can you manage to get tokens with coda password instead?
I guess there is some other problem, possibly not Kerberos-related.

> Also, I'd like to clarify whether a "coda.realm" is what this page refers 
> to as "Coda volume":  

No. A Coda realm is definitely a totally different thing than a Cdoa volume.

> http://www.coda.cs.cmu.edu/trac/wiki/CodaHOWTO/Introduction 

Oh terrible thing, they call a Coda realm for "Coda cell" in this document.
Really confusing.

This page is clearly many years out of date. It is certainly misleading
for an inexperienced reader.

Regards,
Rune