Karl: I can confirm that in 1.5.22 the KFW_AFS_get_cred() function used by afslogon.dll does perform a DNS AFSDB lookup if the CellServDB search fails. There is no logging for this function. The only way to debug it would be to attach a remote debugger to the system and break point the winlogon.exe process.
Jeffrey Altman Karl M. Davis wrote: > My apologies. I've installed OAFW 1.5.22 via Group Policy with a .mst > transform that specifies the default cell. Authentication is using > "Kerberos": against a Windows Server 2003 Active Directory domain. > > KFW 3.2.0 is also installed via MSI. It seems to be working; it lists the > user's logon token. > > Thanks, > Karl > > > -----Original Message----- > From: Jeffrey Altman [mailto:[EMAIL PROTECTED] > Sent: Wednesday, August 29, 2007 6:29 PM > To: Karl M. Davis > Cc: [email protected] > Subject: Re: [OpenAFS] DNS vs. CellServDB > > Karl M. Davis wrote: >> Hello all, >> >> >> >> I’m having problems when I leave my AFS cell server out of the >> CellServDB file on the OAFW clients. I get an “Integrated login failed >> … 255” error when logging in. I have created a DNS record for the AFS >> cell/server (Windows Server DNS), but the client only seems to work when >> the server is specified in the CellServDB file. > > It would be helpful if you provided more details: > > * what version of OAFW? > > * what form of authentication are you using? kaserver or Kerberos v5? > > > > > _______________________________________________ > OpenAFS-info mailing list > [email protected] > https://lists.openafs.org/mailman/listinfo/openafs-info
smime.p7s
Description: S/MIME Cryptographic Signature
