[OpenAFS] windows server 2012 64 bit and integrated authentication with AFS token?

Dave Botsch botsch@cnf.cornell.edu
Wed, 29 Nov 2017 10:53:21 -0500


That's the integrated login message that pops up?

What version of KfW did you say you have installed?

Thanks.

On Wed, Nov 29, 2017 at 04:39:33PM +0100, Giovanni Ponti wrote:
> Dear Dave,
>=20
> the message I've reported is the full one. I simply avoid to report
> my nickname and the cell name. However, you can find the screenshot
> in attached.
>=20
> Regards,
> Giovanni
>=20
> On 28/11/2017 20:28, Dave Botsch wrote:
> >Hi.
> >
> >What's the full message that is displayed (screenshot) ?
> >
> >That sometimes gives an error code or message that tells you what went
> >wrong after the end result error.
> >
> >For the Windows client, you can also turn on additional debugging for
> >the OpenAFS service to log what it does as it goes through trying to g=
et
> >credentials at login.
> >
> >Thanks.
> >
> >On Tue, Nov 28, 2017 at 11:43:20AM +0100, Giovanni Ponti wrote:
> >>Dear Dave,
> >>
> >>thanks for your reply.
> >>
> >>The prompted popup message has the title "Failed to get credential
> >>for ..." with the message "Credential could not be obtained for cell
> >>...". However, after closing the popup message, I can see that I
> >>have obtained the ticket in the Network Identity Manager windows.
> >>
> >>Thanks again,
> >>Giovanni
> >>
> >>On 28/11/2017 05:48, Dave Botsch wrote:
> >>>Does the integrated login pop up a fail error msg? If so, what?
> >>>
> >>>Thanks.
> >>>
> >>>
> >>>On November 27, 2017 15:05:54 Giovanni Bracco
> >>><giovanni.bracco@enea.it> wrote:
> >>>
> >>>>hello!
> >>>>we are trying to install and configure OpenAFS client on a Windows
> >>>>Server machine (vers. 2012 R2 build 9600 x86_64).
> >>>>
> >>>>We have installed Kerberos MIT client (vers. 3.22) and we are able =
to
> >>>>obtain kerberos tickets for a principal from both the IdentityManag=
er
> >>>>GUI and the Window command line interface, using kinit.
> >>>>
> >>>>In the next step, we have installed AFS client and the Kerberos
> >>>>IdentityManager detects it, but their integration does not work, as=
 the
> >>>>afs token can not be obtained.
> >>>>
> >>>>We have tried with both OpenAFS client (vers. 1.7.3100) and AuriSto=
r
> >>>>OpenAFS client (vers. 1.7.3300).
> >>>>
> >>>>Nevertheless, if we operate in the command line, we can obtain kerb=
eros
> >>>>tickets and tokens without problems (using kinit and aklog).
> >>>>
> >>>>Any suggestion to=A0 make the integration and the GUI work properly=
?
> >>>>
> >>>>Giovanni
> >>>>
> >>>>--=20
> >>>>Giovanni Bracco
> >>>>DTE-ICT-HPC
> >>>>ENEA
> >>>>Via E. Fermi 45
> >>>>I-00044 Frascati (Roma) Italy
> >>>>phone +39-06-9400-5597=A0 mobile +39-3351992144
> >>>>FAX=A0=A0 +39-06-9400-5735
> >>>>E-mail=A0 giovanni.bracco@enea.it
> >>>>WWW http://www.afs.enea.it/bracco
> >>>>_______________________________________________
> >>>>OpenAFS-info mailing list
> >>>>OpenAFS-info@openafs.org
> >>>>https://lists.openafs.org/mailman/listinfo/openafs-info
> >>>
> >>>
> >>
> >>--=20
> >>Ing. Giovanni Ponti, PhD
> >>DTE-ICT-HPC
> >>ENEA - C.R. Portici
> >>P.le E. Fermi, 1 (Loc. Granatello)
> >>80055 Portici (NA), Italy
> >>phone : (+39) 081-7723564 | int.: [89] 2564
> >>fax   : (+39) 081-7723344
> >>email : giovanni.ponti@enea.it
> >>web   : http://www.afs.enea.it/gponti
> >
>=20
> --=20
> Ing. Giovanni Ponti, PhD
> DTE-ICT-HPC
> ENEA - C.R. Portici
> P.le E. Fermi, 1 (Loc. Granatello)
> 80055 Portici (NA), Italy
> phone : (+39) 081-7723564 | int.: [89] 2564
> fax   : (+39) 081-7723344
> email : giovanni.ponti@enea.it
> web   : http://www.afs.enea.it/gponti



--=20
********************************
David William Botsch
Programmer/Analyst
@CNFComputing
botsch@cnf.cornell.edu
********************************