[OpenAFS] Windows 7 32bit and OpenAFS 1.6.0b and KfW 3.2.2

[Douglas E. Engert]

Using OpenAFS 1.6.0b with KfW 3.2.2 on Windows 7 32bit
on new machines that are joined to the domain.

We are seeing a popup in the task bar when a non privilaged user
logins saying: "Failed to renew credentials for..."

An admin installs OpenAFS and KfW, and does not see any problems.
Any non privileged user logon using domain accounts and gets the
message.

There are credentials, because the message can be ignored,
and the user can access AFS. KfW may show no credentials.

In some cases (maybe all) the KfW can see the AfsCred plugin
in the "Plug-ins and Modules" window if this is the admin.
If its the user the AfsCred plugin may be missing.

This looks like some kind of permission problem, or some
flags are in the user hive, rather then the local machine hive,
and KfW is having problems find the AfsCred module if the user
is not the same user that installed it.

The machines are all new.

Using the MSI or EXE produces the same problem.

Any ideas on what to look for?

[Kim Kimball]

Post by Douglas E. Engert
Using OpenAFS 1.6.0b with KfW 3.2.2 on Windows 7 32bit
on new machines that are joined to the domain.
We are seeing a popup in the task bar when a non privilaged user
logins saying: "Failed to renew credentials for..."

I'm seeing the same "Failed to renew credentials ..." message across 1.59x, 1.6x
and 1.7x, and credentials do correctly exist -- so the message is superfluous
and probably incorrect. (Conceivably an attempt to renew credentials does fail;
credentials, however, do exist.)

Kim

[Jeffrey Altman]

Post by Kim Kimball

Post by Douglas E. Engert
Using OpenAFS 1.6.0b with KfW 3.2.2 on Windows 7 32bit
on new machines that are joined to the domain.
We are seeing a popup in the task bar when a non privilaged user
logins saying: "Failed to renew credentials for..."

I'm seeing the same "Failed to renew credentials ..." message across 1.59x, 1.6x
and 1.7x, and credentials do correctly exist -- so the message is superfluous
and probably incorrect. (Conceivably an attempt to renew credentials does fail;
credentials, however, do exist.)
Kim

The old tokens are not destroyed if an attempt to renew the Kerberos
service ticket fails.

[Kim Kimball]

Post by Jeffrey Altman

Post by Kim Kimball

Post by Douglas E. Engert
Using OpenAFS 1.6.0b with KfW 3.2.2 on Windows 7 32bit
on new machines that are joined to the domain.
We are seeing a popup in the task bar when a non privilaged user
logins saying: "Failed to renew credentials for..."

I'm seeing the same "Failed to renew credentials ..." message across 1.59x, 1.6x
and 1.7x, and credentials do correctly exist -- so the message is superfluous
and probably incorrect. (Conceivably an attempt to renew credentials does fail;
credentials, however, do exist.)
Kim

The old tokens are not destroyed if an attempt to renew the Kerberos
service ticket fails.

Understood. I was thinking more like "credentials exist; attempt to
renew still occurs but fails"