If you are having trouble obtaining tokens with the Network Identity Manager AFS credential provider, it is recommended that you verify your ability to obtain tokens using the command-line tools klog.exe (if you are using kaserver) or kinit.exe and aklog.exe (if you are using Kerberos v5.) The aklog.exe –d option will be quite helpful in diagnosing Kerberos v5 related problems.