[OpenAFS] aklog: ktc 7 error using OpenAFS for windows

Jeffrey Altman jaltman@secure-endpoints.com
Tue, 14 Sep 2010 23:44:41 +0200


This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig3F5C99934057EC10ABB63061
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 9/14/2010 6:24 PM, John Tang Boyland wrote:
> I have a student who is unable to get AFS tokens using NIM.
> (It does get kerberos tickets).
>=20
> So I tested using the aklog in a command window:
>=20
> This is using openafs version is 1.5.77 (64 bit)
> on a brand-new Windows 7 (64 bit) computer.
> We installed 64 bit KfW (from Secure Endpoints)
>=20
> Here's what results:
>=20
> aklog -d -c cs.uwm.edu
> Authenticating to cell cs.uwm.edu.
> Getting v5 tickets: afs/cs.uwm.edu@CS.UWM.EDU
> Getting v5 tickets: afs/cs.uwm.edu@
> Getting v5 tickets: afs@CS.UWM.EDU
> About to resolve name xxx@CS.UWM.EDU to id
> Id NNNNN
> Set username to xxxx@CS.UWM.EDU
> Getting tokens.
> aklog: ktc 7 (11862791) while obtaining tokens for cell cs.uwm.edu
>=20
> (The same problem happened for a different student with 32 bit AFS with=

> OpenAFS 1.5.76).
>=20
> This is very frustrating since there's no information on how to trouble=

> shoot this problem that I could find. Indeed I'm finding openafs much
> harder to get to work on Windows) this semester than last year. =20
>=20
> Best regards,
>=20
> John

John:

I am very sorry you (and everyone else) are having issues with Windows
7.  The error you have received indicates that aklog has issued a pioctl
to the AFS cache manager and it is unable to communicate with the
service either because the service has not been started or because the
SMB Netbios communication channel (Microsoft's code) has failed.

Network Identity Manager does try to provide you clear feedback on this.
 There is a lock icon in the system notification area for AFS.
If the lock is broken it means that the SMB Netbios communication
channel has failed.  You can also tell that you have this issue if you
issue the command "NET VIEW \\AFS" and it returns a System Error 53
(Network Path Not Found).  If you receive error 53 and "nbtstat -S"
indicates that the service "AFS" is listening, then what has occurred is
that the Microsoft kernel module that performs Netbios name resolution
is failing to identify the published name "AFS".  Unfortunately once
this occurs there is nothing that can be done to regain AFS access but
to reboot.

When an OpenAFS client built upon an native redirector is available for
public use, then this problem will be resolved.  When 1.7 releases begin
to be issued, those releases will contain the AFS redirector.

Jeffrey Altman




--------------enig3F5C99934057EC10ABB63061
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJMj+zJAAoJENxm1CNJffh4+6wH/j7x19ZGYppP1my2j4gYEGdk
Tvg9jrpiLvtyyi4zz6pd0Z0Xo4XruofctL2DdObz5LckwfJ47WrxLMsordyOs1LB
pNoU1my4WYUTX8IcSY+uT/ZyHBqrey2kHrGtguP6rj9q4BIr0eRpxUgspUKhel0P
gqHS+vCvWNnS1FXaGjnVuH8HkBxAQ8XrRvGM3zc0zHcMH1yfXogTCcpzyWV40Vhe
HdLKH8D2MjM1b6l7CY+ID6741WQV34X7QsoBuTuMaLo1rsrrGmKnZEQLXWZyi2B+
BDLBYdoscI1N1K7dwhWuE07AfijAY0JxmOlMWT3XE7qmHhHuSXTgtWCJEKQ4CMU=
=oAZu
-----END PGP SIGNATURE-----

--------------enig3F5C99934057EC10ABB63061--