Now I understand why aklog works for you but afscreds and afslogon do not. aklog always tries the service principal afs/<cell>@<USER-REALM> first regardless of what the VLDB host to domain mapping resolves to.
I would still like to see the output from nslookup for the AFSDB records. Jeffrey Altman
signature.asc
Description: OpenPGP digital signature
