FW: [OpenAFS] Windows XP problems getting an AFS token when logged into a Kerberos Realm

[Greg Wilson]

Following is the output doing a kinit, klist, and aklog.....

I set KRBCCNAME=3DAPI:kxglw.krb5cc

I have a network trace and can supply it if needed....



----------------------------------Starting
Here--------------------------
Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\kxglw.ASUAD>kinit
Password for kxglw@ASU.EDU:
kinit(v524): Key table entry not found converting to V4 credentials

C:\Documents and Settings\kxglw.ASUAD>klist
Ticket cache: API:kxglw.krb5cc
Default principal: kxglw@ASU.EDU

Valid starting     Expires            Service principal
11/24/04 14:32:05  11/25/04 00:32:05  krbtgt/ASU.EDU@ASU.EDU
11/24/04 14:32:18  11/25/04 00:32:05  krbtgt/ASU.EDU@ASU.EDU


Kerberos 4 ticket cache: API:krb4cc
Principal: kxglw@ASU.EDU

  Issued              Expires             Principal
11/24/04 14:32:18  11/25/04 00:32:18  krbtgt.ASU.EDU@ASU.EDU

C:\Documents and Settings\kxglw.ASUAD>aklog -d
Authenticating to cell asu.edu.
Getting v5 tickets: afs/asu.edu@ASU.EDU
Getting v5 tickets: afs@ASU.EDU
Set username to kxglw
Getting tokens.
aklog: unable to obtain tokens for cell asu.edu (status: 11862791).

C:\Documents and Settings\kxglw.ASUAD>klist
Ticket cache: API:kxglw.krb5cc
Default principal: kxglw@ASU.EDU

Valid starting     Expires            Service principal
11/24/04 14:32:05  11/25/04 00:32:05  krbtgt/ASU.EDU@ASU.EDU
11/24/04 14:32:18  11/25/04 00:32:05  krbtgt/ASU.EDU@ASU.EDU
11/24/04 14:32:27  11/25/04 00:32:05  afs@ASU.EDU


Kerberos 4 ticket cache: API:krb4cc
Principal: kxglw@ASU.EDU

  Issued              Expires             Principal
11/24/04 14:32:18  11/25/04 00:32:18  krbtgt.ASU.EDU@ASU.EDU

C:\Documents and Settings\kxglw.ASUAD>tokens

Tokens held by the Cache Manager:

AFS device may not have started

C:\Documents and Settings\kxglw.ASUAD>


------------------------------Network
Trace---------------------------------






___________________________
Greg Wilson
Systems Programmer Principal
Information Technology
Arizona State University

-----Original Message-----
From: James Durand=20
Sent: Wednesday, November 24, 2004 11:09 AM
To: Greg Wilson
Subject: FW: [OpenAFS] Windows XP problems getting an AFS token when
logged into a Kerberos Realm



-----Original Message-----
From: Jeffrey Altman [mailto:jaltman@columbia.edu]
Sent: Wednesday, November 24, 2004 10:54 AM
To: James Durand
Cc: openafs-info@openafs.org
Subject: Re: [OpenAFS] Windows XP problems getting an AFS token when
logged into a Kerberos Realm


What is the full output of "aklog -d"?

What tickets do you have in your ticket cache when the aklog fails?

Can you obtain a network trace of the communication between the
client and the KDCs?

What is your KRB5CCNAME (or the equivalent registry value) set to?

Jeffrey Altman

James Durand wrote:

> Jeff,
>=20
> My fault. I should have mentioned this in the firat note.
> Kerberos for Windows 2.6.5 had already been installed.
>=20
> jim