problem creating user in windows AD

Lars Schimmer l.schimmer at cgv.tugraz.at
Fri Nov 2 10:34:57 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeffrey Altman wrote:
> Lars Schimmer wrote:
>> Hi!
>>
>> Not really OpenAFS problem, more kerberos, but maybe someone has a idea:
>>
>> OpenAFS 1.5.26 on windows XP SP2
>> kfw 3.2.2 on windows
>>
>> Windows 2003 server and AD on it.
>>
>> Probelm so far: new PC setup, I created a new user in AD and in OpenAFS.
>> While trying to logging in (and create a new profile in OpenAFS
>> filespace) I get only: access denied.
> Tokens required to access profiles at logon are obtained by the OpenAFS
> Integrated Logon.  NIM is not involved.
>> Maybe its a bootstrapping problem, after creating a temp profile by
>> windows, user got a token and ticket. But no profile is saved into AFS
>> space.
> The profile will not be saved into AFS until logout.  Does the user have
> a token at logout?
>> the option in kfw (obtain new credential) is NOT activated and I
>> assume thats the problem.
>> It is not save in profile but needed to access the profile, or?
> Profiles containing files or directories whose names include characters
> that cannot be represented in the OEM character set configured for the
> machine cannot be saved to AFS.  The Windows CIFS client cannot speak to
> the AFS Client Service's SMB Server using a Unicode aware protocol.
>> Logging in with a existent user/profile is fine.
>>

Ok, thx, found the problem. Typos are really really BAD.

MfG,
Lars Schimmer
- --
- -------------------------------------------------------------
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer at cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHKzWQmWhuE0qbFyMRAqKmAJ9+AFMzTRFnESpohk41/d0tfQfFXgCbBtEi
TYIRHw+fUItvqR6m7oxUiy0=
=U098
-----END PGP SIGNATURE-----



More information about the Kerberos mailing list