On 9/7/2012 2:06 PM, John Tang Boyland wrote:
> Yes.  I agree.  It's NIM that falls back to openafs.org, it seems
> (even if openafs was installed with cell cs.uwm.edu).
> (I'm not completely sure, perhaps students are misinstalling openafs too.)

HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters

  "Cell" REG_SZ

specifies the workstation cell name which is imported as a default into
NIM's configuration for the Network Identity when it is created.  After
creating the identity, you must alter the AFS cells for which tokens
should be obtained from within NIM.

> ] > but I was surprised to see someone still getting "ktc 7" error when
> ] > using aklog.
> ] >=20
> ] > Network Identity Manager is able to get credentials and AFS tokens (alb=
> ] eit
> ] > with a LONG delay).
> ] 
> ] But these tokens are not visible to "tokens.exe"?   What is wrong with
> ] these tokens?
> 
>> tokens
> 
> Tokens held by the Cache Manager
> 
> AFS Device may not have been started.
> 
> My guess is (since AFS is accessible without tokens, i.e. with
> system:anyuser) that the cache manager is running but it cannot be
> communicated with.

"AFS Device may not have been started" is an indication that the service
is most likely not running.

> ] > kinit works fine.  aklog works until the
> ] > very last step, when it gets unknown error (ktc 7).
> ] 
> ] What is the output of "aklog -d"?
> 
>> aklog -d -c cs.uwm.edu
> Authenticating to cell cs.uwm.edu.
> Getting v5 tickets: afs/cs.uwm....@cs.uwm.edu
> About to resolve name x...@cs.uwm.edu to id
> Id NNNNN
> Set username to x...@cs.uwm.edu
> Getting tokens.
> aklog: Unknown code ktc 7 (11862791) while obtaining tokens for cell 
> cs.uwm.edu
> 
> ] > With the setup, we able to access \\afs\cs.uwm.edu\users\classes
> ] > but not able to access the actual class, almost certainly
> ] > because up to this point requires no tokens, but
> ] > tokens are required to get into the class.
> ] >=20
> ] > It seems that OpenAFS is running and NIM/Kerberos are running fine,
> ] > but it is not possible to get the tokens from NIM to openafs.
> ] >=20
> ] > I tried:
> ] >   net view \\afs
> ] > and got the error
> ] >   'net' is not known as a command, batch file, ...
> ] 
> ] net.exe is a Windows provided tool located in c:\windows\system32.
> ] If you cannot find net.exe, something is wrong with the PATH on the
> ] system in question.
> 
> Yes, something (unrelated NIM/KfW/AFS) seems to be wrong with the
> system.

Which is possibly why the service isn't running.

Jeffrey Altman


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to