> About a week ago we started having problems getting AFS tokens with
> "aklog" on our Windows systems. (works okay on UNIX/Linux). We are in
> the process of switching over to using Kerberos 5 authentication
> against our AD's and up until last week obtaining AFS tokens from
> Kerberos 5 credentials/aklog has been working fine.
>
> It doesn't seem to make a difference what version of OpenAFS we are
> running (1.4.2 or 1.5.12).
>
> I'm able to obtain Kerberos credentials.
>
> c:\>klist (obfuscated)
> Ticket cache: API:[EMAIL PROTECTED]
> Default principal: [EMAIL PROTECTED]
>
> Valid starting Expires Service principal
> 12/04/06 08:40:40 12/11/06 08:40:49 krbtgt/[EMAIL PROTECTED]
> renew until 12/11/06 08:40:40
>
> Running "aklog" in debug mode. I also enabled "pioctl" debugging in
> the registry.
>
> c:\>aklog -d
> Authenticating to cell our.afs.cell.
> Getting v5 tickets: afs/[EMAIL PROTECTED]
> pioctl temp != 0: 0x66543218
> About to resolve name [EMAIL PROTECTED] to id
> Id 12345
> Set username to [EMAIL PROTECTED]
> Getting tokens.
> pioctl Transceive WriteFile failed: 0xC1
> aklog: unable to obtain tokens for cell our.afs.cell (status:
> 11862788).
>
> In doing a "klist" afterwards. I'm getting the cross-realm TGS from
> the Windows AD.
>
> c:\>klist (obfuscated)
> Ticket cache: API:[EMAIL PROTECTED]
> Default principal: [EMAIL PROTECTED]
>
> Valid starting Expires Service principal
> 12/04/06 08:40:40 12/11/06 08:40:49 krbtgt
> 12/04/06 08:40:51 12/11/06 08:40:49 afs/[EMAIL PROTECTED]
> renew until 12/11/06 08:40:40
>
> From what I was able to obtain from the Microsoft MSDN site. WriteFile
> error (0xC1) translates to ERROR_BAD_EXE_FORMAT. I'm out of ideas on
> how to debug this problem. I've tried a Window's strace utility, but I
> wasn't able to obtain anything useful in troubleshooting the problems.
>
> Any ideas that I can use to help troubleshoot?
>
> Thanks
> Paul
