[OpenAFS] KfW working, but can't contact KDC for realm

Ty Sarna tsarna@sarna.org
Fri, 18 Nov 2005 15:17:15 -0500


Jeffrey Altman wrote:
> What is your default ccname?   OpenAFS requires a ccache that can be
> written to.   The MSLSA: ccache on Windows cannot be written to for
> service tickets that the Windows LSA is not configured to obtain on
> its own.

I *think* it's "API:", which should be writeable, no?

Also, it seems unlikely that this would cause the "can't contact KDC"
error when trying to get tokens manually, but perhaps I'm wrong?
Watching the KDC's log, it's definately not even trying to talk to it.