On 04/01/2011 07:04 PM, Jeffrey Altman wrote:
See appendix A.2.1 for details on specifying per logon domain
configuration including the authentication realm.
Hi Jeffrey,
Actually that's where I started. I was trying to give access to two
different cells using the same krb realm.
Kerberos Realm is FCT.UNL.PT
AFS cells are fct.unl.pt, which is the default cell, and staff.fct.unl.pt
I added a new key
[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\STAFF]
since the windows domain is called STAFF.
I then added the value Realm with the krb realm to be used which is
FCT.UNL.PT
Then i added the value TheseCells with staff.fct.unl.pt so i could get
tokens for the second cell
But then, after logon i would only get a token for the default cell.
Windows events showed the following:
Looking up TheseCells
...
Located TheseCells in hkDom size 18
...
Found TheseCells [staff.fct.unl.pt]
...
KFW_AFS_get_cred uname=[[email protected]] smbname=[staff\user]
cell=[fct.unl.pt] code=[0]
...
KFW_AFS_get_cred uname=[[email protected]] smbname=[staff\user]
cell=[staff.fct.unl.pt] code=[-1765328189]
So it does try to get the token, but it fails.
If i get new creds from NIM, it's able to get tokens for both cells.
Any help would be much appreciated.
Best Regards,
Hugo Monteiro.
--
fct.unl.pt:~# cat .signature
Hugo Monteiro
Email : [email protected]
Telefone : +351 212948300 Ext.15307
Web : http://hmonteiro.net
Divisão de Informática
Faculdade de Ciências e Tecnologia da
Universidade Nova de Lisboa
Quinta da Torre 2829-516 Caparica Portugal
Telefone: +351 212948596 Fax: +351 212948548
www.fct.unl.pt [email protected]
fct.unl.pt:~# _
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
