[HCoop-Discuss] Windows err msg: "Integrated logon failed: Cannot contact any KDC for requested realm"?

[Ryan Mikulovsky]

Hello,

> ...I still can't get past the error as shown
> in subject, which occurs when I'm in process of logging in to Windows...I
> tried going back to Admin acct, but what had been working doesn't any
> more...phooey!


Hmm.  Well, this may or may not help:  The AFS client launches a service
so the user would need privileges to start it.  The Power Users group, for
example, has such abilities.  But this does not explain why the admin user
also fails, unless the service wasn't automatically restarted (if needed).
 I am using OpenAFS and krb5 with Vista.  There are interesting issues
with that combination :-)

> Well, I can still access new server via CoreFTP which I was surprised at,
> but happy to see.
> Not sure if the following has any effect on this, but:
> 1) my HCoop password and local W2K pswd are totally different.

This will not cause problems.

> 2) I'm using OpenDNS servers instead of default Verizon DSL values

I don't use the OpenDNS servers.

> 3) I'm still showing some sort of a connection, it seems, in Network
> Identity Manager, and in OpenAFS, but I'm unable to map a local drive
> letter to my HCoop directory.

So the AFS client displays issued tokens and the KDC has valid credentials
but nothing maps?  Is this the case with admin too? Is the krb5 KDC realm
HCOOP.NET (all uppercase)?  Does the advanced tab of the OpenAFS client
show that the service is running normally?  You may want to try running
the openAFS client as administrator and checking the settings (shift
right-click, run as (I think)).

Sometimes I have found that a reboot is necessary to fix openafs auth
issues.  This is particularly the case when my system resumes operation
from sleep-state.


> I'm still quite confused about much of this, but if anyone has any ideas,
> let me know, please, as I'd find it useful to not need to fire up CoreFTP
> to move files to/from my site. Thanks!
>

cheers,
Ryan