[OpenAFS] Multiple Unneeded TGS_REQs

Jason C. Wells jcw@highperformance.net
Fri, 28 Nov 2003 11:48:09 -0800 (PST)


I have OpenAFS for Windows 1.2.10.  I am using ms2mit, k524init, and aklog
from MIT KfW 2.5.  I run a script after windows login to get all my
tickets.  I do not run kaserver on my linux AFS server.  I do not use the
Windows client to obtain afs tickets.  I have disabled AFS integreated
login.  My windows 2000 client machine authenticates to my MIT KDC.
Everything seems to function correctly.  I do have one annoyance.

The problem is that something (AFS?) is kicking off 5 TGS_REQs, every
three minutes.  Coincidentally(?), my AFS login retry time setting is 180
seconds.  I have the integrated login disabled, but it seems to be
re-trying anyway.

I do not have a host named w13-AFS on my network so I do not have a host
principle named w13-AFS in my Kerberos database.  I can understand why the
request is failing.  I do not understand why the request is being made in
the first place.

Why is my client trying to get a ticket for HOST/w13-AFS?  How can I
prevent this?  Is windows causing this or is the AFS client causing this?

I am suspicious that the 180 second retry is a red herring causing me to
think that this is an AFS problem, rather than a Windows problem.  My
first instinct is ABMS, Always Blame Microsoft.

Thanks,
Jason C. Wells

Here is one such offending TGS_REQ

KDC:
Nov 28 11:09:24 s2.stradamotorsports.com krb5kdc[56463](info): TGS_REQ (7
etypes {23 -133 -128 3 1 24 -135}) 192.168.1.13: UNKNOWN_SERVER: authtime
1070045150, jcw@STRADAMOTORSPORTS.COM for HOST/w13-AFS@STRADAMOTORSPORTS.COM,
 Server not found in Kerberos database

Windows Event Viewer:
The function InitializeSecurityContext received a Kerberos Error Message:
         on logon session
 Client Time: 22:4:23.0000 6/29/1988 Z
 Server Time: 19:9:24.0000 11/28/2003 (null)
 Error Code: 0x7  KDC_ERR_S_PRINCIPAL_UNKNOWN
 Client Realm: STRADAMOTORSPORTS.COM
 Client Name: jcw
 Server Realm: STRADAMOTORSPORTS.COM
 Server Name: HOST/w13-AFS
 Target Name: HOST/w13-AFS@STRADAMOTORSPORTS.COM
 Error Text: UNKNOWN_SERVER
 File:
 Line:
 Error Data is in record data.