[OpenAFS] "Integrated Login Failed" under Windows 2000
Jeffrey Altman
jaltman@columbia.edu
Fri, 19 Mar 2004 09:51:58 -0500
This is a cryptographically signed message in MIME format.
--------------ms090205010504080400040709
Content-Type: multipart/alternative;
boundary="------------070002030704040209080907"
This is a multi-part message in MIME format.
--------------070002030704040209080907
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
You can't start the service from a non-administrator account
with the 1.2.xx builds. This was fixed in the 1.3.50 and higher builds.
Do the following. Install the 1.3.60 build that was announced
yesterday and append the service "TransarcAFSDaemon" to the
list specified in the registry value:
Key: HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
Value: ProviderOrder
[This step was left out of the installer. A new installer will replace the
existing one in a couple of days once all of the other reports of trouble
get sorted out.]
If you are still having trouble reply to this e-mail.
Jeffrey Altman
Pamela Goetz wrote:
>Jeffrey, thanks for your fast reply. It definitely explains why the
>Integraged Login fails since 'Administrator' is not a valid user name
>in my AFS cell. :)
>
>The problem is that based on your advice, I created an account (Power
>Users group) in my Windows 2000 workstation with the same exact
>username used to obtain tokens for AFS, but I get the same exact error
>when I login:
>
>AFS LOGON ERROR
>"Integrated Login Failed: <some garbled text>"
>
>I click OK and then the "AFS Client Wizard" is displayed and reads:
>"The AFS Client service has not yet started".
>
>I click 'Next', but instead of starting the client and prompting me for
>username and password (for successful login as happens when I login as
>Administrator), I receive the following error:
>
>"The AFS Client service could not be started"
>
>
>Why can't the AFS Client service be started? Everything seems to be
>installed properly since it starts successfully when logged in as
>Administrator. Must a user have administrative priveleges in order to
>start the AFS Client?
>
>If not, what do I need to configure to make this work? I know about the
>AFS Client Configuration in Control Panel, but I couldn't find there
>anything directly related to my problem and I am afraid to start
>experimenting with the various options there beyond repair...
>
>
>Your help is very much appreciated!
>
>Thanks,
>Pam
>
>
>
>--- Jeffrey Altman <jaltman@columbia.edu> wrote:
>
>>The username used to login to windows must match the username used to
>>obtain
>>tokens for AFS. Otherwise, the AFS Integrated Logon cannot work.
>>
>>Jeffrey Altman
>>
>>
>>Pamela Goetz wrote:
>>
>>
>>>Whenever I restart my Windows 2000 PC (currently automatically login
>>>into Administrator account - as I am still in the process of
>>>installing/configuring it), It gives me the following error:
>>>
>>>AFS LOGON ERROR
>>>"Integrated Login Failed: <some garbled text>"
>>>
>>>(the garbled text looks like an encypted password?)
>>>
>>>I click OK and then the "AFS Client Wizard" is displayed and reads:
>>>"The AFS Client service has not yet started".
>>>
>>>I then click "Next" and the client seems to have been started,
>>>prompting me for AFS cell, user name and password. The AFS cell edit
>>>box already contains the correct value. The user name edit, on the
>>>other hand, contains 'Administrator' - which is of course incorrect.
>>>
>>I
>>
>>>type in my AFS username and password, click 'Next, and everything
>>>
>>works
>>
>>>fine (I get the message: "The AFS Client is ready for use".
>>>
>>>Now... while it is very nice that I can make my AFS client on
>>>
>>Windows
>>
>>>2000 work, it is very inconvenient to always have to type the
>>>
>>username
>>
>>>and password whenever I logon. So, my question is:
>>>
>>>How do make the AFS client service start up automatically and
>>>automatically logon using the username & password that work so
>>>perfectly when I enter them manually?
>>>
>>>I am using AFS Version 1.2.10
>>>
>>>
>>>Thanks,
>>>Pam
>>>
>
>
>__________________________________
>Do you Yahoo!?
>Yahoo! Mail - More reliable, more storage, less spam
>http://mail.yahoo.com
>
--------------070002030704040209080907
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Bitstream Cyberbit">You can't start the service from a
non-administrator account <br>
with the 1.2.xx builds. This was fixed in the 1.3.50 and higher builds.<br>
<br>
Do the following. Install the 1.3.60 build that was announced<br>
yesterday and append the service "TransarcAFSDaemon" to the<br>
list specified in the registry value:<br>
<br>
Key: HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order<br>
Value: ProviderOrder<br>
<br>
[This step was left out of the installer. A new installer will replace
the<br>
existing one in a couple of days once all of the other reports of
trouble<br>
get sorted out.]<br>
<br>
If you are still having trouble reply to this e-mail.<br>
<br>
Jeffrey Altman<br>
<br>
<br>
Pamela Goetz wrote:<br>
</font>
<blockquote cite="mid20040319144318.83286.qmail@web61006.mail.yahoo.com"
type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">Jeffrey, thanks for your fast reply. It definitely explains why the
Integraged Login fails since 'Administrator' is not a valid user name
in my AFS cell. :)
The problem is that based on your advice, I created an account (Power
Users group) in my Windows 2000 workstation with the same exact
username used to obtain tokens for AFS, but I get the same exact error
when I login:
AFS LOGON ERROR
"Integrated Login Failed: <some garbled text>"
I click OK and then the "AFS Client Wizard" is displayed and reads:
"The AFS Client service has not yet started".
I click 'Next', but instead of starting the client and prompting me for
username and password (for successful login as happens when I login as
Administrator), I receive the following error:
"The AFS Client service could not be started"
Why can't the AFS Client service be started? Everything seems to be
installed properly since it starts successfully when logged in as
Administrator. Must a user have administrative priveleges in order to
start the AFS Client?
If not, what do I need to configure to make this work? I know about the
AFS Client Configuration in Control Panel, but I couldn't find there
anything directly related to my problem and I am afraid to start
experimenting with the various options there beyond repair...
Your help is very much appreciated!
Thanks,
Pam
--- Jeffrey Altman <a class="moz-txt-link-rfc2396E" href="mailto:jaltman@columbia.edu"><jaltman@columbia.edu></a> wrote:
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">The username used to login to windows must match the username used to
obtain
tokens for AFS. Otherwise, the AFS Integrated Logon cannot work.
Jeffrey Altman
Pamela Goetz wrote:
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">Whenever I restart my Windows 2000 PC (currently automatically login
into Administrator account - as I am still in the process of
installing/configuring it), It gives me the following error:
AFS LOGON ERROR
"Integrated Login Failed: <some garbled text>"
(the garbled text looks like an encypted password?)
I click OK and then the "AFS Client Wizard" is displayed and reads:
"The AFS Client service has not yet started".
I then click "Next" and the client seems to have been started,
prompting me for AFS cell, user name and password. The AFS cell edit
box already contains the correct value. The user name edit, on the
other hand, contains 'Administrator' - which is of course incorrect.
</font></pre>
</blockquote>
<pre wrap=""><font face="Bitstream Cyberbit">I
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">type in my AFS username and password, click 'Next, and everything
</font></pre>
</blockquote>
<pre wrap=""><font face="Bitstream Cyberbit">works
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">fine (I get the message: "The AFS Client is ready for use".
Now... while it is very nice that I can make my AFS client on
</font></pre>
</blockquote>
<pre wrap=""><font face="Bitstream Cyberbit">Windows
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">2000 work, it is very inconvenient to always have to type the
</font></pre>
</blockquote>
<pre wrap=""><font face="Bitstream Cyberbit">username
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">and password whenever I logon. So, my question is:
How do make the AFS client service start up automatically and
automatically logon using the username & password that work so
perfectly when I enter them manually?
I am using AFS Version 1.2.10
Thanks,
Pam
</font></pre>
</blockquote>
</blockquote>
<pre wrap=""><!----><font face="Bitstream Cyberbit">
__________________________________
Do you Yahoo!?
Yahoo! Mail - More reliable, more storage, less spam
<a class="moz-txt-link-freetext" href="http://mail.yahoo.com">http://mail.yahoo.com</a>
</font></pre>
</blockquote>
</body>
</html>
--------------070002030704040209080907--
--------------ms090205010504080400040709
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJUDCC
AwYwggJvoAMCAQICAwpxijANBgkqhkiG9w0BAQQFADCBkjELMAkGA1UEBhMCWkExFTATBgNV
BAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUx
HTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVl
bWFpbCBSU0EgMjAwMC44LjMwMB4XDTAzMDczMDAyMDkyOFoXDTA0MDcyOTAyMDkyOFowRjEf
MB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjEjMCEGCSqGSIb3DQEJARYUamFsdG1h
bkBjb2x1bWJpYS5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtDG6ZyGA
sK+rZOfKPKGBn6oCTLYSLk/mpeX9QTmTG71qh308KUeN35qqoRXjLvscfw6NPOYXiuxE/RqL
sx7WKEnK3C4gzzpioCTX1b7o4M7YbpvCRBFPE9Jgsd0yz2EN+mk/pPuK1GP+iQNot2m4A56A
aPe6F5T25GqffU535GNIdAtWPao6wHcOm17se25ny/TNzb9mlA4UzYl9XP7MF1fkpJyaDDAy
DNNTSSjxBdPVs2EaYq1p/xadXbIpysQiySXAxoeiZusgJopRHLcBsBmmY9QVD4QnUqZVmfJ5
f1CiNri5vlexKCmdFSrxMLuoLr4EQZCECdusp6ZnIt75AgMBAAGjMTAvMB8GA1UdEQQYMBaB
FGphbHRtYW5AY29sdW1iaWEuZWR1MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQEEBQADgYEA
DPKe/CuAgEUxsrPskJQx2fL6soAEG2iqrqOGIRREHDaXWDBNMEWEbOEMLvh3+yhqHOUc9x3r
2IfsP/XHnujaqsMVXLagokVTnpPN675wv8LZ8hLHblLnykaTCq6RZpVskh2iAiJwpYMcKNF6
jyYaQyGHBGT3PK8uVGVCG4Pp9k4wggMGMIICb6ADAgECAgMKcYowDQYJKoZIhvcNAQEEBQAw
gZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUg
VG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEo
MCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMDAeFw0wMzA3MzAwMjA5
MjhaFw0wNDA3MjkwMjA5MjhaMEYxHzAdBgNVBAMTFlRoYXd0ZSBGcmVlbWFpbCBNZW1iZXIx
IzAhBgkqhkiG9w0BCQEWFGphbHRtYW5AY29sdW1iaWEuZWR1MIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAwbQxumchgLCvq2TnyjyhgZ+qAky2Ei5P5qXl/UE5kxu9aod9PClH
jd+aqqEV4y77HH8OjTzmF4rsRP0ai7Me1ihJytwuIM86YqAk19W+6ODO2G6bwkQRTxPSYLHd
Ms9hDfppP6T7itRj/okDaLdpuAOegGj3uheU9uRqn31Od+RjSHQLVj2qOsB3Dpte7HtuZ8v0
zc2/ZpQOFM2JfVz+zBdX5KScmgwwMgzTU0ko8QXT1bNhGmKtaf8WnV2yKcrEIsklwMaHombr
ICaKURy3AbAZpmPUFQ+EJ1KmVZnyeX9Qoja4ub5XsSgpnRUq8TC7qC6+BEGQhAnbrKemZyLe
+QIDAQABozEwLzAfBgNVHREEGDAWgRRqYWx0bWFuQGNvbHVtYmlhLmVkdTAMBgNVHRMBAf8E
AjAAMA0GCSqGSIb3DQEBBAUAA4GBAAzynvwrgIBFMbKz7JCUMdny+rKABBtoqq6jhiEURBw2
l1gwTTBFhGzhDC74d/soahzlHPcd69iH7D/1x57o2qrDFVy2oKJFU56Tzeu+cL/C2fISx25S
58pGkwqukWaVbJIdogIicKWDHCjReo8mGkMhhwRk9zyvLlRlQhuD6fZOMIIDODCCAqGgAwIB
AgIQZkVyt8x09c9jdkWE0C6RATANBgkqhkiG9w0BAQQFADCB0TELMAkGA1UEBhMCWkExFTAT
BgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3
dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lv
bjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkB
FhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAwMDgzMDAwMDAwMFoXDTA0MDgy
NzIzNTk1OVowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNV
BAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBT
ZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMDCBnzAN
BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3jMypmPHCSVFPtJueCdngcXaiBmClw7jRCmKYzUq
bXA8+tyu9+50bzC8M5B/+TRxoKNtmPHDT6Jl2w36S/HW3WGl+YXNVZo1Gp2Sdagnrthy+boC
9tewkd4c6avgGAOofENCUFGHgzzwObSbVIoTh/+zm51JZgAtCYnslGvpoWkCAwEAAaNOMEww
KQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVMYWJlbDEtMjk3MBIGA1UdEwEB/wQI
MAYBAf8CAQAwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBAUAA4GBADGxS0dd+QFx5fVTbF15
1j2YwCYTYoEipxL4IpXoG0m3J3sEObr85vIk65H6vewNKjj3UFWobPcNrUwbvAP0teuiR59s
ogxYjTFCCRFssBpp0SsSskBdavl50OouJd2K5PzbDR+dAvNa28o89kTqJmmHf0iezqWf54TY
yWJirQXGMYID1TCCA9ECAQEwgZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJu
IENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRD
ZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIw
MDAuOC4zMAIDCnGKMAkGBSsOAwIaBQCgggIPMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEw
HAYJKoZIhvcNAQkFMQ8XDTA0MDMxOTE0NTE1OFowIwYJKoZIhvcNAQkEMRYEFAG9AqbdY7in
zrpVXP702NtqroN5MFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwIC
AgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGrBgkrBgEEAYI3
EAQxgZ0wgZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNV
BAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBT
ZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMAIDCnGK
MIGtBgsqhkiG9w0BCRACCzGBnaCBmjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rl
cm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsT
FENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0Eg
MjAwMC44LjMwAgMKcYowDQYJKoZIhvcNAQEBBQAEggEAlRJwXnTxCEi67GMT6ISinGhcgk7a
vH3wRBuvdN+dWZhADkAOsRGJCNI4ljnqA1roHax2BRFCH/idlf3TXk1AzBveDFBZukPiznFc
7e0moAOvr2LmDFDJIIQpJSQv4o/F61Wc9TnfJxtampm8sBUGlZk+mKY2QVOKCTm9OlzAicfp
7mCnTXzpcDmsFVdqNoRSxU21ZcRjWomYsrcLK6tWOOlwQttbC0GMATk0/rHYcKBNtxuqX4Nj
to1XWxmrMa3rE9IZotD0/yalNYrqwYEns0SwInh251kQJeG7HrO3ofgnE/9OQo0vsbGaPEok
I7rZgJZm2CHJrNHzMdbuUviMcAAAAAAAAA==
--------------ms090205010504080400040709--