Douglas E. Engert wrote:

Jeffrey Altman wrote:

Your Windows domain for which you have obtained krb5 tickets
cannot be mapped to a cell

OK, I'll buy that. But older versions of OpenAFS did not produce 
this MessageBox, yet afs_creds would start.  

It appears that if the checkbox: "Always show AFS client icon in 
the taskbar" is checked, the afs_creds assumes that you want to get 
tokens. I would say that this is not always the case, and maybe 
there should be two checkboxes? I would like afs_creds in the 
taskbar, but not to attempt to get a token.   

I also had to respond twice to this MessageBox. 
 
I did not request KfW to get a token either. Leash shows 
"AFS tokens (disabled)" 

(I was going to use gssklog to get an AFS token using the
tickets as gssklog can also from realm to cell where realm != cell.)
You are seeing the dialog twice once because of the
Kerberos 5 tickets imported from the MS LSA cache
and the second time when the tickets are imported
from the default KFW ccache.

You won't get the dialog if you disable the use of
Kerberos for Windows


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to