Re: [OpenAFS] Problems getting tickets on logon

2010-05-05 Thread Justin Brinegar
Hi Jeff, I'd prefer to get a TGT during the logon process. Quoting an email on the kerberos list from a year ago (subject: KfW and NiM getting mutliple TGT's, David Bear): NIM does not obtain the credentials. The KFW network provider (kfwlogon.dll) does this if and only if: 1. the

Re: [OpenAFS] Problems getting tickets on logon

2010-05-05 Thread Justin Brinegar
I've narrowed it down a bit today with some more testing. Having read the release notes and followed the directions/suggestions for 64 bit Windows, is there something else I should be aware of? The process works as expected on 32 bit Windows 7. I still have some more testing to do regarding

[OpenAFS] Problems getting tickets on logon

2010-05-04 Thread Justin Brinegar
I'm having some problems getting Network Identity Manager/KFW to obtain tickets in a foreign kerberos realm at logon - details are below. I've got this to work on one machine, but I can't replicate it on another. The setup: wedge is in atestdomain.physics.unc.edu, 32 bit Windows 7, UAC off.

Re: [OpenAFS] Problems getting tickets on logon

2010-05-04 Thread Jeffrey Altman
On 5/4/2010 4:24 PM, Justin Brinegar wrote: I'm having some problems getting Network Identity Manager/KFW to obtain tickets in a foreign kerberos realm at logon - details are below. I've got this to work on one machine, but I can't replicate it on another. You can obtain extensive log data

Re: [OpenAFS] Problems getting tickets on logon

2010-05-04 Thread Stephen Joyce
Hi Jeff, Thanks for replying. I think what Justin is trying to do is log into a PC in an AD domain (using a local or domain account), obtain krb5 tickets in an MIT realm, get tokens in an AFS cell (afs/c...@mit.realm), and optionally get tokens in a second AFS cell (a...@mit.realm). The