[OpenAFS] OpenAFS 1.3.63 on Windows XP

Jon Nials jnials@digitalmotorworks.com
Fri, 30 Apr 2004 16:05:58 -0500


This is a multi-part message in MIME format.

------_=_NextPart_001_01C42EF6.EF82492C
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Heh.  I think you may have just hit the nail on the head.  I was not
running KfW....
[scurries off to do some searches]
Well, amazing what having all the software will do.  I just installed
Kerberos for Windows Version 2.6.1,
configured it for my AFS cell and Kerberos realm, and all is happy.
=20
sigh.  Thanks for your help.  Now I have a new toy (KfW) to play with.
=20
-Jon
=20
=20
Jon R. Nials
Lead Systems Administrator
Digital Motorworks, L.P.
Work:  512-692-1039
Pager: jnials@skytel.com
jnials@digitalmotorworks.com
www.digitalmotorworks.com

	-----Original Message-----
	From: Jeffrey Altman [mailto:jaltman@columbia.edu]=20
	Sent: Friday, April 30, 2004 3:22 PM
	To: Jon Nials
	Cc: openafs-info@openafs.org
	Subject: Re: [OpenAFS] OpenAFS 1.3.63 on Windows XP
=09
=09
	which version of KFW?
=09
	what is the output of "klist" and "tokens"?
=09
=09
=09
	Jon Nials wrote:
=09

		I am obtaining them through the client.  I do not
currently have any trust relationship set up between our Active
Directory domain and our kerberos cell.  I am running mit kerberos 5 as
distributed with redhat 9 (1.2.7 I believe) on the servers, no kaserver,
and running with the krb524d turned off.
		=20
		I am running 1.3.63 version of the client.
		=20
		=20
		Jon R. Nials
		Lead Systems Administrator
		Digital Motorworks, L.P.
		Work:  512-692-1039
		Pager: jnials@skytel.com
		jnials@digitalmotorworks.com
		www.digitalmotorworks.com

			-----Original Message-----
			From: Jeffrey Altman
[mailto:jaltman@columbia.edu]=20
			Sent: Friday, April 30, 2004 11:46 AM
			To: Jon Nials
			Cc: Chris Crowther; openafs-info@openafs.org
			Subject: Re: [OpenAFS] OpenAFS 1.3.63 on Windows
XP
		=09
		=09
			Really?  I'm using KRB5 tickets that expire on 6
May 2004.
			that is certainly more than 20 hours and they
are not expiring immediately.
			How are you obtaining your tickets?  And your
tokens?
		=09
			Jeffrey Altman
		=09
		=09
			Jon Nials wrote:
		=09

				The main problem I am having is
kerberos-5 tickets over 20 hours.  Our
				AFS cell is running MIT Kerb5 and
tickets over about 20 hours go
				negative and cause the credentials to
expire immediately.
				Unfortunately, I haven't had time to
work on it.
			=09
				-Jon
			=09
				Jon R. Nials
				Lead Systems Administrator
				Digital Motorworks, L.P.
				Work:  512-692-1039
				Pager: jnials@skytel.com
				jnials@digitalmotorworks.com
				www.digitalmotorworks.com
			=09
			=09


------_=_NextPart_001_01C42EF6.EF82492C
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR></HEAD>
<BODY text=3D#000000 bgColor=3D#ffffff>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2>Heh.&nbsp; I think you may have just hit the nail on the =
head.&nbsp; I=20
was not running KfW....</FONT></SPAN></DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2>[scurries off to do some searches]</FONT></SPAN></DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =
size=3D2>Well,=20
amazing what having all the software will do.&nbsp; I just installed =
Kerberos=20
for Windows Version 2.6.1,</FONT></SPAN></DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2>configured it for my AFS cell and Kerberos realm, and all is=20
happy.</FONT></SPAN></DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2>sigh.&nbsp; Thanks for your help.&nbsp; Now I have a new toy =
(KfW) to=20
play with.</FONT></SPAN></DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D460195720-30042004><FONT face=3DArial color=3D#0000ff =

size=3D2>-Jon</FONT></SPAN></DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Jon R. Nials</FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Lead Systems =
Administrator</FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Digital Motorworks, =
L.P.</FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Work:&nbsp; =
512-692-1039</FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2>Pager: <A=20
href=3D"mailto:jnials@skytel.com">jnials@skytel.com</A></FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial size=3D2><A=20
href=3D"mailto:jnials@digitalmotorworks.com">jnials@digitalmotorworks.com=
</A></FONT></DIV>
<DIV align=3Dleft><FONT face=3DArial =
size=3D2>www.digitalmotorworks.com</FONT></DIV>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
align=3Dleft><FONT=20
  face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B> =
Jeffrey Altman=20
  [mailto:jaltman@columbia.edu] <BR><B>Sent:</B> Friday, April 30, 2004 =
3:22=20
  PM<BR><B>To:</B> Jon Nials<BR><B>Cc:</B>=20
  openafs-info@openafs.org<BR><B>Subject:</B> Re: [OpenAFS] OpenAFS =
1.3.63 on=20
  Windows XP<BR><BR></FONT></DIV><FONT face=3D"Bitstream Cyberbit">which =
version=20
  of KFW?<BR><BR>what is the output of "klist" and =
"tokens"?<BR><BR><BR><BR>Jon=20
  Nials wrote:<BR></FONT>
  <BLOCKQUOTE=20
  =
cite=3DmidCFC553798EAECD42B7F63B300230E8E5253D9A@EXCHANGE-BE01.ad.dmotorw=
orks.com=20
  type=3D"cite">
    <META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR>
    <DIV><FONT face=3D"Bitstream Cyberbit"><SPAN =
class=3D490370420-30042004><FONT=20
    color=3D#0000ff>I am obtaining them through the client.&nbsp; I do =
not=20
    currently have any trust relationship set up between our Active =
Directory=20
    domain and our kerberos cell.&nbsp; I am running mit kerberos 5 as=20
    distributed with redhat 9 (1.2.7 I believe) on the servers, no =
kaserver, and=20
    running with the krb524d turned off.</FONT></SPAN></FONT></DIV>
    <DIV><FONT face=3D"Bitstream Cyberbit"><SPAN=20
    class=3D490370420-30042004></SPAN></FONT>&nbsp;</DIV>
    <DIV><FONT face=3D"Bitstream Cyberbit"><SPAN =
class=3D490370420-30042004><FONT=20
    color=3D#0000ff>I am running 1.3.63 version of the=20
    client.</FONT></SPAN></FONT></DIV>
    <DIV><FONT face=3D"Bitstream Cyberbit"></FONT>&nbsp;</DIV>
    <DIV><FONT face=3D"Bitstream Cyberbit"></FONT>&nbsp;</DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit">Jon R. =
Nials</FONT></DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit">Lead Systems=20
    Administrator</FONT></DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit">Digital =
Motorworks,=20
    L.P.</FONT></DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit">Work:&nbsp;=20
    512-692-1039</FONT></DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit">Pager: <A=20
    href=3D"mailto:jnials@skytel.com">jnials@skytel.com</A></FONT></DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit"><A=20
    =
href=3D"mailto:jnials@digitalmotorworks.com">jnials@digitalmotorworks.com=
</A></FONT></DIV>
    <DIV align=3Dleft><FONT face=3D"Bitstream Cyberbit"><A=20
    class=3Dmoz-txt-link-abbreviated=20
    =
href=3D"http://www.digitalmotorworks.com">www.digitalmotorworks.com</A></=
FONT></DIV>
    <BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
      <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
align=3Dleft><FONT=20
      face=3D"Bitstream Cyberbit">-----Original =
Message-----<BR><B>From:</B>=20
      Jeffrey Altman [<A class=3Dmoz-txt-link-freetext=20
      =
href=3D"mailto:jaltman@columbia.edu">mailto:jaltman@columbia.edu</A>]=20
      <BR><B>Sent:</B> Friday, April 30, 2004 11:46 AM<BR><B>To:</B> Jon =

      Nials<BR><B>Cc:</B> Chris Crowther; <A =
class=3Dmoz-txt-link-abbreviated=20
      =
href=3D"mailto:openafs-info@openafs.org">openafs-info@openafs.org</A><BR>=
<B>Subject:</B>=20
      Re: [OpenAFS] OpenAFS 1.3.63 on Windows =
XP<BR><BR></FONT></DIV><FONT=20
      face=3D"Bitstream Cyberbit">Really?&nbsp; I'm using KRB5 tickets =
that expire=20
      on 6 May 2004.<BR>that is certainly more than 20 hours and they =
are not=20
      expiring immediately.<BR>How are you obtaining your tickets?&nbsp; =
And=20
      your tokens?<BR><BR>Jeffrey Altman<BR><BR><BR>Jon Nials =
wrote:<BR></FONT>
      <BLOCKQUOTE=20
      =
cite=3DmidCFC553798EAECD42B7F63B300230E8E5253D95@EXCHANGE-BE01.ad.dmotorw=
orks.com=20
      type=3D"cite"><PRE wrap=3D""><FONT face=3D"Bitstream Cyberbit">The =
main problem I am having is kerberos-5 tickets over 20 hours.  Our
AFS cell is running MIT Kerb5 and tickets over about 20 hours go
negative and cause the credentials to expire immediately.
Unfortunately, I haven't had time to work on it.

-Jon

Jon R. Nials
Lead Systems Administrator
Digital Motorworks, L.P.
Work:  512-692-1039
Pager: <A class=3Dmoz-txt-link-abbreviated =
href=3D"mailto:jnials@skytel.com">jnials@skytel.com</A>
<A class=3Dmoz-txt-link-abbreviated =
href=3D"mailto:jnials@digitalmotorworks.com">jnials@digitalmotorworks.com=
</A>
<A class=3Dmoz-txt-link-abbreviated =
href=3D"http://www.digitalmotorworks.com">www.digitalmotorworks.com</A>

</FONT></PRE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BODY><=
/HTML>

------_=_NextPart_001_01C42EF6.EF82492C--