SMB Auth vs external Kerberos login

Jeffrey Altman <[email protected]>
Newsgroups gmane.comp.file-systems.openafs.devel.win32
Organization No Longer Affiliated with Columbia University in the City of New York
Message-ID <[email protected]>
The following seems to be the only work arounds I have been
able to find.  Note the information in (3):

SMB Authentication will fail in the following situation.  If you have
configured the Windows machine to authenticate to a non-Windows realm
(MIT or Heimdal KDC) and you are using account mapping to map the
Kerberos principal to local account name.  If the password for the
Kerberos principal and the local machine account are not the same,
SMB Authentication will fail.  To make AFS accessible to the user one
of three things must be done:

(1) The user must synchronize the local Windows password with the Kerberos
    password

(2) The user must login with the local Windows account

(3) The user must attach to the AFS server using the local account 
credentials.
    The user can do this either by browsing \\AFS in the Windows 
Explorer and
    specify "remember my password" to avoid the need to perform this 
operation
    in the future; or the following commands may be executed from the 
command
    line:

    NET USE \\AFS /USER:<local-account-name> <password>
    NET USE \\AFS /SAVECRED

(4) SMB Authentication for OpenAFS must be disabled.  (see registry.txt
    for information on how to set the SMBAuthType to NONE.
smime.p7s (application/x-pkcs7-signature, 3.2 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.