[OpenAFS] kerberos ticket not set at login on Windows 7

John Perkins john@cs.wisc.edu
Fri, 23 Dec 2011 14:58:42 -0600


Occasionally on some of our Windows 7 computers (64-bit, OpenAFS 1.7.100 
through 1.7.400), we have noticed that OpenAFS tickets are sometimes not 
obtained when the user logs in or when obtaining a kerberos ticket via 
Network Identity Manager.  Non-administrator users at our site have 
mappings to a kerberos KDC for authentication, so the kerberos ticket is 
granted from the KDC realm every time.

Requesting the same ticket again via NIM--even though the ticket is 
still valid--will get a valid AFS token.  *Most* of the time the ticket 
and token are obtained without a problem.

Any thoughts on what might cause such behavior?

John Perkins
UW-Madison Computer Sciences