User:Djgreen/AFS Installation

Installing AFS clients for Vista machines without the use of WolfCall. Instructions made while installing on a Vista Enterprise workstation (32bit).

• Download KFW 3.2.2 from http://web.mit.edu/kerberos/dist/index.html
  • Install, selecting "Complete" when prompted.
• Download OpenAFS 1.5.27 from http://www.openafs.org/windows.html
  • Install, selecting "Typical" when prompted.
  • This will install the loopback adapter + the NetID credentials utility.
• Reboot when requested.

• At login, you'll receive the following error "Integrated Login failed: Decrypt integrity check failed". Click OK.
• The "Obtain New AFS Tokens" window will pop up. Close it.
  • I believe this popup can be prevented if you click the "Prevent AFSCreds.exe from starting automatically when you log in to Windows" option in the Network Identity Manager Configuration in the "AFS" section. Will need to test this later.
• Open the Network Identity Manager.
• Options>AFS>Click "OpenAFS Control Panel".
• Change the Client Configuration Cell Name from 'openafs.org' to 'unity.ncsu.edu'.

• Replace the contents of C:Windows\krb5.ini with the following:

[realms]
 EOS.NCSU.EDU = {
  admin_server = kerberos-master.ncsu.edu:749
  default_domain = eos.ncsu.edu
 }

[logging]
 default = FILE:/var/adm/krb5.log

[libdefaults]
 ticket_lifetime = 24000
 default_realm = EOS.NCSU.EDU
 default_tkt_enctypes = des-cbc-crc
 default_tgs_enctypes = des-cbc-crc
 dns_lookup_kdc = true
 dns_lookup_realm = false

[domain_realm]
 .ncsu.edu = EOS.NCSU.EDU
 ncsu.edu = EOS.NCSU.EDU