Re: Access denied after 20 minutes or so

Joshua Mann wrote:
> Hi,
> 
> We're using OpenAFS v 1.5.13 w/ MIT Krb5 V 3.1 for
> Windows XP. After obtaining a krb5 ticket & a token
> via the afscred or the NID gui, we get access to our
> afs shares. But this lasts for less than an hour {this
> time appears to be random) at which time we get
> "access denied" connecting to AFS drives or "share not
> found" when connecting to UNC shortcuts.  In order to
> recover from this situation, we have to 1) destroy the
> afs token via NID or unlog.exe or destroy all tickets,
> 2) click on the AFS drives or shortcuts, and 3) then
> obtain new tickets.  This will give us temporary
> access to AFS until it breaks again in less than
> another hour.  Has anyone seen this behavior?
>  
> We also tried using OpenAFS v 1.4.2 with the same
> results.
> 
> OpenAFS for Windows works fine with krb4. 
> 
> We noticed when we do a Properites listing of the afs
> ticket in NID that the "Client Principle" is formated
> "[email protected]@company.com" which seems peculiar. 
> Is this normal?
>  
> Regards,
> Joshua M.

Somehow I missed this when it was originally sent.

Bug reports should be sent to [email protected].

User questions should be sent to [email protected].

In the Release Notes for the OpenAFS client is a section on debugging.
What you want to do is configure the OpenAFS client "TraceOption" to
output debug string info and use the SysInternals DbgView application to
capture the output to a file.   When you notice that you no longer have
access look in the debugging output for the error codes that are being
returned by the file server.

Jeffrey Altman