...
Do not use the Kerberos for Windows application to obtain new tokens. Use the AFS client (lock icon).
Linux
From the "Applications" menu on CNF SunRays, choose "afstokens". Your tokens are
displayed in the box labeled "My AFS Tokens".
Look for the Key icon at the top right of your screen and mouse over the icon. A popup will tell you when your credentials will expire (if renewable the credentials will be renewed). You can also right click on the key icon and choose "List Tickets"... look for the tickets labeled "afs/cnf.cornell.edu@CNF.CORNELL.EDU" . If the key icon has a yellow exclamation or a red x, then you should manually obtain new credentials. Simply left click on the key icon – you will be prompted for your password.
Or from the commandline, type "tokens" to see your tokens.
To obtain new tokens, either use the GUI application (key icon) mentioned above or from the commandline type in kinit <username> followed by entering your password followed by typing in: aklog. See below for proper formatting of your username.
Newer versions of the gui krb5-auth-dialog application (the key icon mentioned above) have the ability to obtain and renew AFS tokens – you can install and configure this application on your local Linux system.
Macintosh
The built-in System Preferences panel for managing AFS tokens does not work properly in the CNF environment. Do not use it.
...