[OpenAFS] DNS vs. CellServDB

Karl M. Davis karl@ridgetop-group.com
Thu, 30 Aug 2007 09:19:29 -0700


My apologies.  I've installed OAFW 1.5.22 via Group Policy with a .mst =
transform that specifies the default cell.  Authentication is using =
"Kerberos": against a Windows Server 2003 Active Directory domain.

KFW 3.2.0 is also installed via MSI.  It seems to be working; it lists =
the user's logon token.

Thanks,
Karl


-----Original Message-----
From: Jeffrey Altman [mailto:jaltman@secure-endpoints.com]=20
Sent: Wednesday, August 29, 2007 6:29 PM
To: Karl M. Davis
Cc: openafs-info@openafs.org
Subject: Re: [OpenAFS] DNS vs. CellServDB

Karl M. Davis wrote:
> Hello all,
>=20
> =20
>=20
> I=E2=80=99m having problems when I leave my AFS cell server out of the
> CellServDB file on the OAFW clients.  I get an =E2=80=9CIntegrated =
login failed
> =E2=80=A6 255=E2=80=9D error when logging in.  I have created a DNS =
record for the AFS
> cell/server (Windows Server DNS), but the client only seems to work =
when
> the server is specified in the CellServDB file.

It would be helpful if you provided more details:

* what version of OAFW?

* what form of authentication are you using?  kaserver or Kerberos v5?