[OpenAFS] NOCM Error on 20040508
Jeffrey Altman
jaltman@columbia.edu
Mon, 10 May 2004 20:58:56 -0400
This is a cryptographically signed message in MIME format.
--------------ms070008050709080706060800
Content-Type: multipart/alternative;
boundary="------------000801050101080000040607"
This is a multi-part message in MIME format.
--------------000801050101080000040607
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Jason C. Wells wrote:
>
>I get this error message on log in: "KTC_NOCM: The service, Transarc
>AFS Daemon, most likely not started! (0xb50307) (ktc{GetToken() failed)".
>This is when I log in using the MIT KDC.
>
Are you saying that Integrated Logon is producing this error?
Or is this error being produced by some other command you
are executing? aklog.exe? from within a logon script?
If you are executing aklog.exe. how are the Kerberos 5
tickets being obtained?
>If I log in using Local Workstation, I can get a token by running kinit -5
>-f and aklog -5. In fact, I do this immediately after the MIT KDC login
>attempt (without a reboot) which would tell me that afsd is working
>correctly and that there is something specifically amiss with an MIT
>login.
>
>>You also described a different problem with drive mappings created when
>>there are two different Logon methods used for Windows. When using
>>local authentication you had no problems. When using Kerberos
>>authentication you could not create drive mappings to the AFS Client
>>Service.
>>
>>Which of these problems are you experiencing?
>>
>
>I have no problems with drive mapping now, when I can get a token. It has
>been a while so I am having trouble recalling which problem happened when.
>
>Looking in the archives, this is the discussion that seems most fitting to
>the current situation:
>
>https://lists.openafs.org/pipermail/openafs-info/2004-January/011740.html
>https://lists.openafs.org/pipermail/openafs-info/2004-January/011738.html
>
>
I read these threads earlier today. They are related to your
inability to create the SMB drive mapping. Which you are not
experiencing right now.
>With respect to using an MIT KDC, 1.3.6300 works for me and 20040508 does
>not. When 1.3.6300 came out I was thrilled because everything was working
>as I had expected, except the drive selection drop down menu.
>
>Just for giggles, I reverted to 1.3.6300 and verified that using an MIT
>KDC works. It does.
>
>Questions?
>
>
One important question. What are you using to obtain the tokens?
Does the aklog.exe which comes with OpenAFS 0508 work for you?
--------------000801050101080000040607
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Bitstream Cyberbit">Jason C. Wells wrote:</font>
<blockquote
cite="midPine.BSF.4.44.0405101656170.13658-100000@s1.stradamotorsports.com"
type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">
I get this error message on log in: "KTC_NOCM: The service, Transarc
AFS Daemon, most likely not started! (0xb50307) (ktc{GetToken() failed)".
This is when I log in using the MIT KDC.
</font></pre>
</blockquote>
Are you saying that Integrated Logon is producing this error?<br>
Or is this error being produced by some other command you <br>
are executing? aklog.exe? from within a logon script?<br>
<br>
If you are executing aklog.exe. how are the Kerberos 5 <br>
tickets being obtained?<br>
<br>
<blockquote
cite="midPine.BSF.4.44.0405101656170.13658-100000@s1.stradamotorsports.com"
type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">If I log in using Local Workstation, I can get a token by running kinit -5
-f and aklog -5. In fact, I do this immediately after the MIT KDC login
attempt (without a reboot) which would tell me that afsd is working
correctly and that there is something specifically amiss with an MIT
login.
</font></pre>
</blockquote>
<br>
<br>
<blockquote
cite="midPine.BSF.4.44.0405101656170.13658-100000@s1.stradamotorsports.com"
type="cite">
<pre wrap=""></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">You also described a different problem with drive mappings created when
there are two different Logon methods used for Windows. When using
local authentication you had no problems. When using Kerberos
authentication you could not create drive mappings to the AFS Client
Service.
Which of these problems are you experiencing?
</font></pre>
</blockquote>
<pre wrap=""><!----><font face="Bitstream Cyberbit">
I have no problems with drive mapping now, when I can get a token. It has
been a while so I am having trouble recalling which problem happened when.
Looking in the archives, this is the discussion that seems most fitting to
the current situation:
<a class="moz-txt-link-freetext" href="https://lists.openafs.org/pipermail/openafs-info/2004-January/011740.html">https://lists.openafs.org/pipermail/openafs-info/2004-January/011740.html</a>
<a class="moz-txt-link-freetext" href="https://lists.openafs.org/pipermail/openafs-info/2004-January/011738.html">https://lists.openafs.org/pipermail/openafs-info/2004-January/011738.html</a>
</font></pre>
</blockquote>
I read these threads earlier today. They are related to your<br>
inability to create the SMB drive mapping. Which you are not<br>
experiencing right now.<br>
<br>
<blockquote
cite="midPine.BSF.4.44.0405101656170.13658-100000@s1.stradamotorsports.com"
type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">With respect to using an MIT KDC, 1.3.6300 works for me and 20040508 does
not. When 1.3.6300 came out I was thrilled because everything was working
as I had expected, except the drive selection drop down menu.
Just for giggles, I reverted to 1.3.6300 and verified that using an MIT
KDC works. It does.
Questions?
</font></pre>
</blockquote>
One important question. What are you using to obtain the tokens?<br>
Does the aklog.exe which comes with OpenAFS 0508 work for you?<br>
<br>
<br>
</body>
</html>
--------------000801050101080000040607--
--------------ms070008050709080706060800
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms070008050709080706060800--