Paul Accisano wrote: > Greetings all, > > I'm trying to get OpenAFS working on my Vista laptop, and it's giving me > a serious headache. The installation went okay, but when I try to get > tokens, I get the following error message: > -- The AFS Client was unable to obtain tokens as [username] in cell > [cell address]. > -- Error 11862791 (AFS service may not have started)
This error means that pioctls are not working. You can debug this by following the advice in section 4 of the release notes. The release notes are installed on the machine and can be accessed via the Start Menu. > The service is definitely running, according to the client window. If > enter the wrong password, I get a "password incorrect" error, so it's at > least recognizing my account. One thing I think may be related to the > problem: at the top of the client window, it says > -- Currently logged on to Windows Networking as "" The string that is listed as "logged on" is meaningless. It is a display only feature that is a hold over from IBM's product. If you are referring to this, it also means that you are not using Network Identity Manager for authentication. The AFS Credentials Tool is deprecated because it does not work well on Vista among other reasons. > In an older version, (which I tried installing for the hell of it), it says > -- Currently logged on to Windows Networking as "(unknown)" This is a red herring. > where as on my XP box, it correctly lists my username. I hope this > helps. This is really driving my nuts; I've googled and googled but I > can't find a solution... Can anyone give me some advice? You have two problems. 1. you can't communicate with the AFS cache manager. That was because the loopback configuration was wrong. 2. you can't authenticate. In order for you to be able to authenticate you must be using the correct realm. If you did not install the Kerberos 5 configuration file for your realm, then the default will be ATHENA.MIT.EDU. If all you are doing is entering "paul" and "password" into the AFS Credentials dialog, then you are authenticating to the account "[email protected]". I doubt that is your intention. If you have another machine that work, copy the krb5.ini file from that machine and place it in C:\WINDOWS. It is New Year's Eve. Will be back next year. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
