[OpenAFS] OpenAFS Windows client with Symantec Firewall issue

[Lars Schimmer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jaime Cifuentes wrote:
>=20
> Hello all,
>       I am having a problem with OpenAFS windows client when Symantec i=
s
> enabled. I hope to get this issue resolved because several of my custom=
ers
> have the same issue.
>       Let me describe it:
>=20
> The Environment:
>=20
> Windows XP Professional, v 2002 SP 2
> AFS client 1.5.5800 - though the problem is the same on other OpanAFS
> client versions such as 1.5.16

Please use latest version 1.5.58, a lot of serious bugs were fixed since
your ancient version.

> Symantec v 8.7.4.97
>=20
> The problem:.
>=20
> I can not authenticate to the cell with Symantec Firewall enabled. I ge=
t
> "AFS client unable to obtain tokens Error: 11862791 (AFS service may no=
t be
> started)".  However, if I turn off the Firewall, the authentication hap=
pens
> without any problems. Once the authentication has succeeded AFS continu=
es
> to work without issues, even after the firewall is turned back on.
>=20
> The Firewall has rules for "AFS Client", and for "OpenAFS Client Servic=
e".
> I also verified NETBIOS over tcpip is enabled (I read that somewhere in=
 the
> web).
>=20
> I tend to believe it's the Firewall, - since it works with it turn off =
-
> but I can not find what it is.  Any help or pointers will be greatly
> appreciated

Have a look on the loopback network and the firewall - OpenAFS uses the
loopback device and a local samba server.

>                               Jaime Cifuentes


MfG,
Lars Schimmer
- --
- -------------------------------------------------------------
TU Graz, Institut f=FCr ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer@cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAknXSLcACgkQmWhuE0qbFyORlACdGBk4CW3m4dIColZmTH9lyj3s
OM8AnR/rPw3E9KskbDgH+AOHbfvpHJJi
=3DXkGA
-----END PGP SIGNATURE-----