<o:Author>Jeffrey Altman</o:Author>
<o:Keywords>OpenAFS 1.4.0</o:Keywords>
<o:LastAuthor>Jeffrey Altman</o:LastAuthor>
- <o:Revision>4</o:Revision>
- <o:TotalTime>44</o:TotalTime>
+ <o:Revision>5</o:Revision>
+ <o:TotalTime>45</o:TotalTime>
<o:LastPrinted>2005-09-26T23:55:00Z</o:LastPrinted>
<o:Created>2005-09-25T20:12:00Z</o:Created>
- <o:LastSaved>2005-10-03T00:31:00Z</o:LastSaved>
+ <o:LastSaved>2005-10-03T02:28:00Z</o:LastSaved>
<o:Pages>1</o:Pages>
<o:Words>14557</o:Words>
<o:Characters>82979</o:Characters>
mso-bidi-language:#0400;}
</style>
<![endif]--><!--[if gte mso 9]><xml>
- <o:shapedefaults v:ext="edit" spidmax="4098"/>
+ <o:shapedefaults v:ext="edit" spidmax="5122"/>
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1"/>
Windows<span style='color:windowtext;display:none;mso-hide:screen;text-decoration:
none;text-underline:none'><span style='mso-tab-count:1 dotted'>. </span></span><!--[if supportFields]><span
style='color:windowtext;display:none;mso-hide:screen;text-decoration:none;
-text-underline:none'><span style='mso-element:field-begin'></span> PAGEREF _Toc115417114
-\h </span><span style='color:windowtext;text-decoration:none;text-underline:
-none'><span style='display:none;mso-hide:screen'><span style='mso-element:field-separator'></span></span></span><![endif]--><span
+text-underline:none'><span style='mso-element:field-begin'></span> PAGEREF
+_Toc115417114 \h </span><span style='color:windowtext;text-decoration:none;
+text-underline:none'><span style='display:none;mso-hide:screen'><span
+style='mso-element:field-separator'></span></span></span><![endif]--><span
style='color:windowtext;display:none;mso-hide:screen;text-decoration:none;
text-underline:none'>14<!--[if gte mso 9]><xml>
<w:data>08D0C9EA79F9BACE118C8200AA004BA90B02000000080000000E0000005F0054006F0063003100310035003400310037003100310034000000</w:data>
mso-no-proof:yes'><o:p></o:p></span></p>
<h1 style='margin-left:0pt;text-indent:0pt'><!--[if supportFields]><span
-style='mso-element:field-end'></span><![endif]--><a name="_Toc11541
7109"></a><a
-name="_Toc115417037"></a><a name="_Toc115416098"><span style='mso-bookmark:
-_Toc115417037'><span style='mso-bookmark:_Toc115417109'>1. Installer Options</span></span></a></h1>
+style='mso-element:field-end'></span><![endif]--><a name="_Toc11541
6098"></a><a
+name="_Toc115417037"></a><a name="_Toc115417109"><span style='mso-bookmark:
+_Toc115417037'><span style='mso-bookmark:_Toc115416098'>1. Installer Options</span></span></a></h1>
<p class=MsoNormal>It can be installed either as a new installation or an
upgrade from previous versions of OpenAFS for Windows or IBM AFS for
using WiX and can be customized for organizations via the use of MSI Transforms
(see <a href="#_MSI_Deployment_Guide">MSI Deployment Guide</a>)</p>
-<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7110"></a><a
-name="_Toc115417038"></a><a name="_Toc115416099"><span style='mso-bookmark:
-_Toc115417038'><span style='mso-bookmark:_Toc115417110'>2. System Requirements</span></span></a></h1>
+<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6099"></a><a
+name="_Toc115417038"></a><a name="_Toc115417110"><span style='mso-bookmark:
+_Toc115417038'><span style='mso-bookmark:_Toc115416099'>2. System Requirements</span></span></a></h1>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7039"></a><a
-name="_Toc115416100"><span style='mso-bookmark:_Toc115417039'>2.1 Supported
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6100"></a><a
+name="_Toc115417039"><span style='mso-bookmark:_Toc115416100'>2.1 Supported
Operating Systems</span></a></h2>
<p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt;mso-list:
style='mso-spacerun:yes'> </span>The last version with support for Windows NT
4.0 is 1.2.10.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7040"></a><a
-name="_Toc115416102"><span style='mso-bookmark:_Toc115417040'>2.2 Disk Space</span></a></h2>
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6102"></a><a
+name="_Toc115417040"><span style='mso-bookmark:_Toc115416102'>2.2 Disk Space</span></a></h2>
<p class=MsoNormal>Up to 60mb required for the OpenAFS binaries plus 100MB for
the default AFSCache file.<span style='mso-spacerun:yes'> </span>(The size of
the AFSCache file may be adjusted via the Registry after installation.)</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7041"></a><a
-name="_Toc115416103"><span style='mso-bookmark:_Toc115417041'>2.3 Additional
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6103"></a><a
+name="_Toc115417041"><span style='mso-bookmark:_Toc115416103'>2.3 Additional
Software</span></a></h2>
<p class=MsoNormal><a href="http://web.mit.edu/kerberos/dist/index.html">MIT
Kerberos for Windows</a> 2.6.x if Kerberos 5 authentication support is desired.</p>
-<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7111"></a><a
-name="_Toc115417042"></a><a name="_Toc115416104"><span style='mso-bookmark:
-_Toc115417042'><span style='mso-bookmark:_Toc115417111'>3. Operational Notes</span></span></a></h1>
+<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6104"></a><a
+name="_Toc115417042"></a><a name="_Toc115417111"><span style='mso-bookmark:
+_Toc115417042'><span style='mso-bookmark:_Toc115416104'>3. Operational Notes</span></span></a></h1>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7043"></a><a
-name="_Toc115416105"><span style='mso-bookmark:_Toc115417043'>3.1. Requirements
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6105"></a><a
+name="_Toc115417043"><span style='mso-bookmark:_Toc115416105'>3.1. Requirements
for Kerberos 5 Authentication</span></a></h2>
<p class=MsoNormal>The Kerberos 4 infrastructure on which the OpenAFS 1.2
style='mso-spacerun:yes'> </span>XE "krb524" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7044"></a><a
-name="_Toc115416108"><span style='mso-bookmark:_Toc115417044'>3.2. Use of the
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6108"></a><a
+name="_Toc115417044"><span style='mso-bookmark:_Toc115416108'>3.2. Use of the
Microsoft Loopback Adapter</span></a></h2>
<p class=MsoNormal>By itself the OpenAFS Client Service does not provide robust
other network adapters installed on the system.<span style='mso-spacerun:yes'>
</span></p>
-<p class=MsoNormal>The MLA is installed with a name of "AFS" and a
-pre-assigned IP address in the 10.x.x.x range.<span style='mso-spacerun:yes'>
-</span>The MLA is bound to the \93Client for Microsoft Networks\94 service and not
-bound to the \93File and Printer Sharing for Microsoft Networks\94.<span
+<p class=MsoNormal>The MLA is installed with a name of "AFS" and a pre-assigned
+IP address in the 10.x.x.x range.<span style='mso-spacerun:yes'> </span>The
+MLA is bound to the \93Client for Microsoft Networks\94 service and not bound to
+the \93File and Printer Sharing for Microsoft Networks\94.<span
style='mso-spacerun:yes'> </span>If the MLA is unbound to "Client
Microsoft Networks", the OpenAFS Client Service will become inaccessible
when the machine is disconnected from the network.<span
style='mso-spacerun:yes'> </span>One of the benefits of using the MLA is that
the NETBIOS name does not have to be published on any adapter other than the
MLA.<span style='mso-spacerun:yes'> </span>Therefore the chosen name is no
-longer required to be unique.<span style='mso-spacerun:yes'> </span>Instead
-the NETBIOS name associated with the AFS Client Service is simply
-"AFS" and portable UNC paths of the form \\AFS\cellname\path can now
-be used on all machines.<!--[if supportFields]><span style='mso-element:field-begin'></span>
+longer required to be unique.<span style='mso-spacerun:yes'> </span>Instead the
+NETBIOS name associated with the AFS Client Service is simply "AFS"
+and portable UNC paths of the form \\AFS\cellname\path can now be used on all
+machines.<!--[if supportFields]><span style='mso-element:field-begin'></span>
XE "loopback" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--><!--[if supportFields]><span
style='mso-element:field-begin'></span><span
style='mso-spacerun:yes'> </span>XE "NETBIOS" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7045"></a><a
-name="_Toc115416109"><span style='mso-bookmark:_Toc115417045'>3.3. Using
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6109"></a><a
+name="_Toc115417045"><span style='mso-bookmark:_Toc115416109'>3.3. Using
Freelance (Dynamic Root) Mode to Improve Mobility</span></a></h2>
-<p class=MsoNormal>Traditionally, when the OpenAFS Client Service starts it
-must be able to access the "root.afs" volume of the default
-cell.<span style='mso-spacerun:yes'> </span>The "root.afs" volume
-contains the set of mount points to the "root.cell" volumes of
-various cells the administrator of the default cell believes should be
-accessible.<span style='mso-spacerun:yes'> </span>If the "root.afs"
-volume is inaccessible when the client service is started, the service will
-terminate unexpectedly.<span style='mso-spacerun:yes'> </span>Since many users
-now use laptops or otherwise operate in disconnected environments in which a
-VPN may be required to access the cell's servers, it is often the case that the
+<p class=MsoNormal>Traditionally, when the OpenAFS Client Service starts it must
+be able to access the "root.afs" volume of the default cell.<span
+style='mso-spacerun:yes'> </span>The "root.afs" volume contains the
+set of mount points to the "root.cell" volumes of various cells the
+administrator of the default cell believes should be accessible.<span
+style='mso-spacerun:yes'> </span>If the "root.afs" volume is
+inaccessible when the client service is started, the service will terminate
+unexpectedly.<span style='mso-spacerun:yes'> </span>Since many users now use
+laptops or otherwise operate in disconnected environments in which a VPN may be
+required to access the cell's servers, it is often the case that the
"root.afs" volume for the default cell is not reachable and the
OpenAFS Client Service will not successfully start. </p>
<p class=MsoNormal>To allow the OpenAFS Client Service to operate in these
-environments, a fake "root.afs" volume is dynamically constructed
-from mount points and symlinks stored in the local registry.<span
+environments, a fake "root.afs" volume is dynamically constructed from
+mount points and symlinks stored in the local registry.<span
style='mso-spacerun:yes'> </span>This method of operation is referred to as
Freelance mode.</p>
style='mso-element:field-end'></span><![endif]--><span
style='mso-spacerun:yes'> </span></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7046"></a><a
-name="_Toc115416110"><span style='mso-bookmark:_Toc115417046'>3.4. Locating AFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6110"></a><a
+name="_Toc115417046"><span style='mso-bookmark:_Toc115416110'>3.4. Locating AFS
Volume Database Servers</span></a> </h2>
<p class=MsoNormal>The OpenAFS for Windows client will use DNS AFSDB records to
style='mso-spacerun:yes'> </span>XE "afsdb" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7047"></a><a
-name="_Toc115416111"><span style='mso-bookmark:_Toc115417047'>3.5. Obtaining
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6111"></a><a
+name="_Toc115417047"><span style='mso-bookmark:_Toc115416111'>3.5. Obtaining
AFS Tokens as a Part of Windows Logon</span></a></h2>
<p class=MsoNormal>OpenAFS for Windows installs a WinLogon Network Provider to
into the default ccache within the user logon session.</p>
<p class=MsoNormal>Integrated Logon does not have the ability to cache the
-user's username and password for the purpose of obtaining tokens if the Kerberos
-KDC is inaccessible at logon time.</p>
+user's username and password for the purpose of obtaining tokens if the
+Kerberos KDC is inaccessible at logon time.</p>
<p class=MsoNormal>Integrated Login supports the ability to obtain tokens for
multiple cells.<span style='mso-spacerun:yes'> </span>For further information
style='mso-element:field-begin'></span> XE "integrated login" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7048"></a><a
-name="_Toc115416112"><span style='mso-bookmark:_Toc115417048'>3.6. AFS System
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6112"></a><a
+name="_Toc115417048"><span style='mso-bookmark:_Toc115416112'>3.6. AFS System
Tray Command Line Options</span></a></h2>
<p class=MsoNormal>The AFS System Tray tool (afscreds.exe) supports several
<p class=PreformattedText><span style='mso-spacerun:yes'> </span>-U =
uninstall startup shortcut</p>
-<p class=PreformattedText><span style='mso-spacerun:yes'> </span>-X = test
-and do map share</p>
+<p class=PreformattedText><span style='mso-spacerun:yes'> </span><span
+style='mso-spacerun:yes'> </span>-X = test and do map share</p>
<p class=PreformattedText><span style='mso-spacerun:yes'> </span>-Z = unmap
drives</p>
<p class=MsoNormal>autoinit will result in automated attempts to acquire AFS
tokens when afscreds.exe is started.<span style='mso-spacerun:yes'>
-</span>afscreds.exe will attempt to utilize tickets stored in the MSLSA credentials
-cache; any existing CCAPI credentials cache; and finally display an Obtain
-Tokens dialog to the user.<span style='mso-spacerun:yes'> </span>When used in
-combination with IP address change detection, afscreds.exe will attempt to
-acquire AFS tokens whenever the IP address list changes and the Kerberos KDC is
-accessible.</p>
+</span>afscreds.exe will attempt to utilize tickets stored in the MSLSA
+credentials cache; any existing CCAPI credentials cache; and finally display an
+Obtain Tokens dialog to the user.<span style='mso-spacerun:yes'> </span>When
+used in combination with IP address change detection, afscreds.exe will attempt
+to acquire AFS tokens whenever the IP address list changes and the Kerberos KDC
+is accessible.</p>
<p class=MsoNormal>The renew drive maps option is used to ensure that the user
drive maps constructed via the OpenAFS tools (not NET USE) are re-constructed
style='mso-element:field-begin'></span> XE "afscreds.exe" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7049"></a><a
-name="_Toc115416113"><span style='mso-bookmark:_Toc115417049'>3.7. The \93AFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6113"></a><a
+name="_Toc115417049"><span style='mso-bookmark:_Toc115416113'>3.7. The \93AFS
Client Admins\94 Authorization Group</span></a></h2>
<p class=MsoNormal>The OpenAFS for Windows 1.4 client supports a local Windows
style='mso-spacerun:yes'> </span>XE "fs.exe" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7050"></a><a
-name="_Toc115416114"><span style='mso-bookmark:_Toc115417050'>3.8. OpenAFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6114"></a><a
+name="_Toc115417050"><span style='mso-bookmark:_Toc115416114'>3.8. OpenAFS
support for UNC paths</span></a> </h2>
<p class=MsoNormal>The OpenAFS 1.4 client supports UNC paths everywhere.<span
style='mso-spacerun:yes'> </span>AFS paths can be entered in UNIX notation
(e.g., <a href="file:///\\afs\openafs.org\software">/afs/openafs.org/software</a>),
space utilization reports the output of the volume status for the specified
-path, and many AFS specific functions and variables have been added to the
-command language.</p>
+path, and many AFS specific functions and variables have been added to the command
+language.</p>
<p class=MsoNormal>JPSoftware's web site is <span class=MsoHyperlink>http://www.jpsoft.com</span>.<!--[if supportFields]><span
style='mso-element:field-begin'></span> XE "JP Software" <![endif]--><!--[if supportFields]><span
style='mso-spacerun:yes'> </span>XE "4nt.exe" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7051"></a><a
-name="_Toc115416115"><span style='mso-bookmark:_Toc115417051'>3.9. OpenAFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6115"></a><a
+name="_Toc115417051"><span style='mso-bookmark:_Toc115416115'>3.9. OpenAFS
includes aklog.exe</span></a></h2>
<p class=MsoNormal>The OpenAFS 1.4 Client ships with its own version of
<p class=PreformattedText>Usage: aklog [-d] [[-cell | -c] cell [-k krb_realm]]</p>
-<p class=PreformattedText><span style='mso-spacerun:yes'> </span>[[-p
-| -path] pathname]</p>
-
<p class=PreformattedText><span style='mso-spacerun:yes'>
-</span>[-noprdb] [-force]</p>
+</span>[[-p | -path] pathname]</p>
+
+<p class=PreformattedText><span style='mso-spacerun:yes'> </span><span
+style='mso-spacerun:yes'> </span>[-noprdb] [-force]</p>
<p class=PreformattedText><span style='mso-spacerun:yes'>
</span>[-5 [-m]| -4]</p>
style='mso-element:field-begin'></span> XE "aklog.exe" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7052"></a><a
-name="_Toc115416116"><span style='mso-bookmark:_Toc115417052'>3.10. OpenAFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6116"></a><a
+name="_Toc115417052"><span style='mso-bookmark:_Toc115416116'>3.10. OpenAFS
Servers on Windows are Unsupported</span></a></h2>
<p class=MsoNormal>The AFS Server functionality provided with OpenAFS 1.4 might
style='mso-element:field-begin'></span> XE "AFS Servers" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7053"></a><a
-name="_Toc115416117"><span style='mso-bookmark:_Toc115417053'>3.11. OpenAFS
-Debugging Symbol files</span></a></h2>
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6117"></a><a
+name="_Toc115417053"><span style='mso-bookmark:_Toc115416117'>3.11. OpenAFS Debugging
+Symbol files</span></a></h2>
<p class=MsoNormal>The OpenAFS for Windows installers now include Debugging
Symbol files which should be installed if you are experiencing problems and
style='mso-element:field-begin'></span> XE "Symbol files" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7054"></a><a
-name="_Toc115416118"><span style='mso-bookmark:_Toc115417054'>3.12. Maximum
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6118"></a><a
+name="_Toc115417054"><span style='mso-bookmark:_Toc115416118'>3.12. Maximum
File Size is 2GB</span></a></h2>
<p class=MsoNormal>OpenAFS for Windows does not support files larger than
2GB.<span style='mso-spacerun:yes'> </span>The version of the SMB/CIFS
protocol implemented imposes this limitation.<span style='mso-spacerun:yes'>
-</span>Upgrading the SMB/CIFS implementation or replacing it with an Installable
-File System will allow larger files to be supported.<!--[if supportFields]><span
+</span>Upgrading the SMB/CIFS implementation or replacing it with an
+Installable File System will allow larger files to be supported.<!--[if supportFields]><span
style='mso-element:field-begin'></span> XE "large file support" <![endif]--><!--[if supportFields]><span
style='mso-element:field-end'></span><![endif]--></p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7055"></a><a
-name="_Toc115416119"><span style='mso-bookmark:_Toc115417055'>3.13. Encrypted
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6119"></a><a
+name="_Toc115417055"><span style='mso-bookmark:_Toc115416119'>3.13. Encrypted
AFS File Access</span></a></h2>
<p class=MsoNormal>The OpenAFS for Windows installer by default activates a
-weak form of encrypted data transfer between the AFS client and the AFS servers.<span
-style='mso-spacerun:yes'> </span>This is often referred to as
+weak form of encrypted data transfer between the AFS client and the AFS
+servers.<span style='mso-spacerun:yes'> </span>This is often referred to as
"fcrypt" mode.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7056"></a><a
-name="_Toc115416120"><span style='mso-bookmark:_Toc115417056'>3.14.
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6120"></a><a
+name="_Toc115417056"><span style='mso-bookmark:_Toc115416120'>3.14.
Authenticated Access to the OpenAFS Client Service</span></a></h2>
<p class=MsoNormal>OpenAFS 1.4 supports authenticated SMB connections using
</span></p>
<p class=MsoNormal>When GSS SPNEGO attempts a Kerberos 5 authentication, the
-Windows SMB client will attempt to retrieve service tickets for
-"cifs/afs@REALM" (if the loopback adapter is in use) or
-"cifs/machine-afs@REALM" (if the loopback adapter is not being
-used).<span style='mso-spacerun:yes'> </span>It is extremely important that
-this service principal not exist in the KDC database as the Kerberos
-authentication must fail allowing automatic fallback to NTLM.<span
-style='mso-spacerun:yes'> </span>When NTLM is used a special local
-authentication mode will be used that does not require access to the user's
-password.<span style='mso-spacerun:yes'> </span>Instead, Windows will
-internally recognize the request as coming from a local logon session.</p>
-
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc115417057"></a><a
-name="_Toc115416121"><span style='mso-bookmark:_Toc115417057'>3.15. No More INI
+Windows SMB client will attempt to retrieve service tickets for "cifs/afs@REALM"
+(if the loopback adapter is in use) or "cifs/machine-afs@REALM" (if
+the loopback adapter is not being used).<span style='mso-spacerun:yes'>
+</span>It is extremely important that this service principal not exist in the
+KDC database as the Kerberos authentication must fail allowing automatic
+fallback to NTLM.<span style='mso-spacerun:yes'> </span>When NTLM is used a
+special local authentication mode will be used that does not require access to
+the user's password.<span style='mso-spacerun:yes'> </span>Instead, Windows
+will internally recognize the request as coming from a local logon session.</p>
+
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc115416121"></a><a
+name="_Toc115417057"><span style='mso-bookmark:_Toc115416121'>3.15. No More INI
Files</span></a></h2>
<p class=MsoNormal>Previous AFS clients for Windows stored configuration data
Windows registry.<span style='mso-spacerun:yes'> </span>OpenAFS 1.4 will not
process the contents of the \93afsddbmt.ini\94.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7058"></a><a
-name="_Toc115416122"><span style='mso-bookmark:_Toc115417058'>3.16. Microsoft
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6122"></a><a
+name="_Toc115417058"><span style='mso-bookmark:_Toc115416122'>3.16. Microsoft
Windows Internet Connection Firewall</span></a></h2>
<p class=MsoNormal>The OpenAFS 1.4 Client is compatible with the Internet
appropriate <i>Back Connection</i> registry entries are added to allow SMB
authentication to be performed across the Microsoft Loopback Adapter.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7059"></a><a
-name="_Toc115416123"><span style='mso-bookmark:_Toc115417059'>3.17. Browsing AFS
-from the Explorer Shell and Office</span></a></h2>
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6123"></a><a
+name="_Toc115417059"><span style='mso-bookmark:_Toc115416123'>3.17. Browsing
+AFS from the Explorer Shell and Office</span></a></h2>
<p class=MsoNormal>The OpenAFS 1.4 Client Service implements the CIFS Remote
Admin Protocol which allows Explorer to browse server and share information.
that files not be edited within AFS if they might be accessed by multiple users
or multiple processes on a single machine.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7061"></a><a
-name="_Toc115416125"><span style='mso-bookmark:_Toc115417061'>3.19. Automatic
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6125"></a><a
+name="_Toc115417061"><span style='mso-bookmark:_Toc115416125'>3.19. Automatic
Discarding of AFS Tokens at Logoff</span></a></h2>
<p class=MsoNormal>OpenAFS 1.4 will automatically forget a user's tokens upon
Logoff unless the user's profile was loaded from an AFS volume.<span
style='mso-spacerun:yes'> </span>In this situation there is no mechanism to
-determine when the profile has been successfully written back to the network.<span
-style='mso-spacerun:yes'> </span>It is therefore unsafe to release the user's
-tokens.<span style='mso-spacerun:yes'> </span>Whether or not the profile has
-been loaded from the registry can be determined for Local Accounts, Active
-Directory accounts and NT4 accounts.</p>
+determine when the profile has been successfully written back to the
+network.<span style='mso-spacerun:yes'> </span>It is therefore unsafe to
+release the user's tokens.<span style='mso-spacerun:yes'> </span>Whether or
+not the profile has been loaded from the registry can be determined for Local
+Accounts, Active Directory accounts and NT4 accounts.</p>
<p class=MsoNormal>If there is a need to disable this functionality, the <span
style='mso-bidi-font-style:italic'><a href="#_Value_:_LogoffPreserveTokens">LogoffPreserveTokens</a></span>
registry value can be used. (see <a href="#_Appendix_A:_Registry_Values">Appendix
A</a>.)</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7062"></a><a
-name="_Toc115416126"><span style='mso-bookmark:_Toc115417062'>3.20. Terminal
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6126"></a><a
+name="_Toc115417062"><span style='mso-bookmark:_Toc115416126'>3.20. Terminal
Server installations</span></a></h2>
<p class=MsoNormal>When installing the NSIS (.exe) installer under Terminal
AFS not running properly.<span style='mso-spacerun:yes'> </span>The AFS Server
should not be installed on a machine with Terminal Server installed.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7063"></a><a
-name="_Toc115416127"><span style='mso-bookmark:_Toc115417063'>3.21. Hidden Dot
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6127"></a><a
+name="_Toc115417063"><span style='mso-bookmark:_Toc115416127'>3.21. Hidden Dot
Files</span></a></h2>
<p class=MsoNormal>AFS is a UNIX native file system.<span
automatically given the Hidden attribute so they will not normally be
displayed.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7064"></a><a
-name="_Toc115416128"><span style='mso-bookmark:_Toc115417064'>3.22. Status
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6128"></a><a
+name="_Toc115417064"><span style='mso-bookmark:_Toc115416128'>3.22. Status
Cache Limits</span></a></h2>
<p class=MsoNormal>The Status Cache (AFS Configuration Control Panel: Advanced
</span>Each entry requires approximately 1.2K.<span style='mso-spacerun:yes'>
</span>In OpenAFS 1.4, the default number of Status Cache entries is 10,000.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7065"></a><a
-name="_Toc115416129"><span style='mso-bookmark:_Toc115417065'>3.23. NETBIOS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6129"></a><a
+name="_Toc115417065"><span style='mso-bookmark:_Toc115416129'>3.23. NETBIOS
over TCP/IP must be enabled</span></a></h2>
<p class=MsoNormal>"Netbios over TCP/IP" must be active on the
on the machine, then communication with the AFS Client Service will be
impossible.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7066"></a><a
-name="_Toc115416130"><span style='mso-bookmark:_Toc115417066'>3.24. OpenAFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6130"></a><a
+name="_Toc115417066"><span style='mso-bookmark:_Toc115416130'>3.24. OpenAFS
binaries are digitally signed</span></a></h2>
<p class=MsoNormal>The OpenAFS Client Service and related binaries distributed
registry value which can be used to disable the signature check.<span
style='mso-spacerun:yes'> </span>The file version check cannot be disabled.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7067"></a><a
-name="_Toc115416131"><span style='mso-bookmark:_Toc115417067'>3.25. Maximum
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6131"></a><a
+name="_Toc115417067"><span style='mso-bookmark:_Toc115416131'>3.25. Maximum
Size of the AFSCache File</span></a></h2>
<p class=MsoNormal>The maximum cache size is approximately 1.3GB.<span
signature verification code, any attempt to specify a cache size greater then
700MB will result in the automatic disabling of the signature check.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7068"></a><a
-name="_Toc115416132"><span style='mso-bookmark:_Toc115417068'>3.26. Filename
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6132"></a><a
+name="_Toc115417068"><span style='mso-bookmark:_Toc115416132'>3.26. Filename
Character Sets</span></a></h2>
<p class=MsoNormal>OpenAFS for Windows implements an SMB server which is used
OpenAFS for Windows from being able to access filenames containing the above
characters which were created without this setting.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7069"></a><a
-name="_Toc115416133"><span style='mso-bookmark:_Toc115417069'>3.27. Known
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6133"></a><a
+name="_Toc115417069"><span style='mso-bookmark:_Toc115416133'>3.27. Known
Character Set Issues with Roaming Profiles</span></a></h2>
<p class=MsoNormal>There is a known issue with storing Windows Roaming Profiles
some sites run logoff scripts (assigned by group policy) which rename all files
to use only the supported characters for the locale.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7070"></a><a
-name="_Toc115416134"><span style='mso-bookmark:_Toc115417070'>3.28. The
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6134"></a><a
+name="_Toc115417070"><span style='mso-bookmark:_Toc115416134'>3.28. The
AFSCache File</span></a></h2>
<p class=MsoNormal>The AFS Cache file is stored by default at %TEMP%\AFSCache
style='mso-spacerun:yes'> </span>Significant performance gains can be
achieved by defragmenting the AFSCache file with Sysinternal's Contig utility.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7071"></a><a
-name="_Toc115416135"><span style='mso-bookmark:_Toc115417071'>3.29. Restricting
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6135"></a><a
+name="_Toc115417071"><span style='mso-bookmark:_Toc115416135'>3.29. Restricting
OpenAFS Client Service Start and Stop</span></a></h2>
<p class=MsoNormal>A new command line tool, afsdacl.exe, can be used to
<p class=PreformattedText><span style='mso-spacerun:yes'>
</span>-show<span style='mso-spacerun:yes'> </span>: Show current DACL (SDSF)</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7072"></a><a
-name="_Toc115416136"><span style='mso-bookmark:_Toc115417072'>3.30. The @sys
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6136"></a><a
+name="_Toc115417072"><span style='mso-bookmark:_Toc115416136'>3.30. The @sys
Name List</span></a></h2>
<p class=MsoNormal>The default @sys name list in OpenAFS 1.4 is set to
"ia64_win64" and "amd64_win64" for amd 64-bit processors
when those platforms are supported.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7073"></a><a
-name="_Toc115416137"><span style='mso-bookmark:_Toc115417073'>3.31. Symlinks to
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6137"></a><a
+name="_Toc115417073"><span style='mso-bookmark:_Toc115416137'>3.31. Symlinks to
AFS UNC paths</span></a></h2>
<p class=MsoNormal>In OpenAFS 1.4, symlinks to AFS UNC paths, \\AFS[\all]\...,
</span>However, please use /afs/... as the Windows UNC form will not work on
UNIX.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7074"></a><a
-name="_Toc115416138"><span style='mso-bookmark:_Toc115417074'>3.32. Cache
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6138"></a><a
+name="_Toc115417074"><span style='mso-bookmark:_Toc115416138'>3.32. Cache
Manager Debugging Now Supported</span></a></h2>
<p class=MsoNormal>OpenAFS for Windows 1.4 implements the Cache Manager
</span>-cache<span style='mso-spacerun:yes'> </span>print only cache
configuration</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7075"></a><a
-name="_Toc115416139"><span style='mso-bookmark:_Toc115417075'>3.33. Windows
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6139"></a><a
+name="_Toc115417075"><span style='mso-bookmark:_Toc115416139'>3.33. Windows
Logon Caching vs. Kerberos Logons</span></a></h2>
<p class=MsoNormal>If you are a site which utilizes MIT/Heimdal Kerberos
multi-domain Windows forest, you must enable Windows logon caching unless the
workstation is Windows Vista Beta 1 or later.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7076"></a><a
-name="_Toc115416140"><span style='mso-bookmark:_Toc115417076'>3.34. Initial
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6140"></a><a
+name="_Toc115417076"><span style='mso-bookmark:_Toc115416140'>3.34. Initial
Server Preferences</span></a></h2>
<p class=MsoNormal>VLDB and File Server Preferences can now be provided initial
href="#_Appendix_A:_Registry_Values">Appendix A</a> for details on the "<a
href="#_Regkey:_[HKLMSOFTWAREOpenAFSClie_2">Server Preferences</a>" keys.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7077"></a><a
-name="_Toc115416141"><span style='mso-bookmark:_Toc115417077'>3.35. File
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6141"></a><a
+name="_Toc115417077"><span style='mso-bookmark:_Toc115416141'>3.35. File
Timestamps</span></a></h2>
<p class=MsoNormal>OpenAFS 1.4 reports timestamps on files stored in AFS in UTC
</span>During DST, these two times will no longer agree even though they are in
fact representing the same moment in time.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7078"></a><a
-name="_Toc115416142"><span style='mso-bookmark:_Toc115417078'>3.36. Windows RPC
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6142"></a><a
+name="_Toc115417078"><span style='mso-bookmark:_Toc115416142'>3.36. Windows RPC
client support must be installed</span></a> </h2>
<p class=MsoNormal>If the installer refuses to install and complains about an
<p class=PreformattedText><span style='mso-spacerun:yes'> </span>HKLM
"SOFTWARE\Microsoft\RPC\ClientProtocols" "ncacn_http"</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7079"></a><a
-name="_Toc115416143"><span style='mso-bookmark:_Toc115417079'>3.37. Generating
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6143"></a><a
+name="_Toc115417079"><span style='mso-bookmark:_Toc115416143'>3.37. Generating
Minidumps of the OpenAFS Client Service</span></a></h2>
<p class=MsoNormal>OpenAFS 1.4 adds a new command, "fs
can be very helpful when debugging the AFS Client Service when it is
unresponsive to SMB/CIFS requests.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7080"></a><a
-name="_Toc115416144"><span style='mso-bookmark:_Toc115417080'>3.38. AFS Client
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6144"></a><a
+name="_Toc115417080"><span style='mso-bookmark:_Toc115416144'>3.38. AFS Client
Universally Unique Identifiers</span></a></h2>
<p class=MsoNormal>The OpenAFS for Windows 1.4 client implements Universally
client installed, the AFSCache files must be deleted as part of the cloning
process.</p>
-<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7112"></a><a
-name="_Toc115417081"></a><a name="_Toc115416145"><span style='mso-bookmark:
-_Toc115417081'><span style='mso-bookmark:_Toc115417112'>4. How to Debug Problems
+<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6145"></a><a
+name="_Toc115417081"></a><a name="_Toc115417112"><span style='mso-bookmark:
+_Toc115417081'><span style='mso-bookmark:_Toc115416145'>4. How to Debug Problems
with OpenAFS for Windows:</span></span></a></h1>
<p class=MsoNormal>OpenAFS for Windows provides a wide range of tools to assist
techniques available to you are varied because of the wide range of issues that
have been discovered over the years.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7082"></a><a
-name="_Toc115416146"><span style='mso-bookmark:_Toc115417082'>4.1. pioctl debugging
-(</span></a><a href="#_Value___:_IoctlDebug"><span style='mso-bookmark:_Toc115416146'><span
-style='mso-bookmark:_Toc115417082'>IoctlDebug</span></span><span
-style='mso-bookmark:_Toc115416146'><span style='mso-bookmark:_Toc115417082'></span></span></a><span
-style='mso-bookmark:_Toc115416146'><span style='mso-bookmark:_Toc115417082'>
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6146"></a><a
+name="_Toc115417082"><span style='mso-bookmark:_Toc115416146'>4.1. pioctl
+debugging (</span></a><a href="#_Value___:_IoctlDebug"><span style='mso-bookmark:
+_Toc115417082'><span style='mso-bookmark:_Toc115416146'>IoctlDebug</span></span><span
+style='mso-bookmark:_Toc115417082'><span style='mso-bookmark:_Toc115416146'></span></span></a><span
+style='mso-bookmark:_Toc115417082'><span style='mso-bookmark:_Toc115416146'>
registry key)</span></span></h2>
<p class=MsoNormal>pioctl (path-based ioctl) calls are used by various tools to
KnowledgeBase can be used as a reference to help you determine the
configuration probem with your system.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7083"></a><a
-name="_Toc115416147"><span style='mso-bookmark:_Toc115417083'>4.2. afsd_service
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6147"></a><a
+name="_Toc115417083"><span style='mso-bookmark:_Toc115416147'>4.2. afsd_service
initialization log (%WinDir%\TEMP\afsd_init.log)</span></a></h2>
<p class=MsoNormal>Every time the AFS Client Service starts it appends data
maximum size of the %WINDIR%\TEMP\afsd_init.log file.<span
style='mso-spacerun:yes'> </span>If the file is larger than this value when
OpenAFS Client Service starts, the file will be reset to 0 bytes.<span
-style='mso-spacerun:yes'> </span>If value is set to 0, the file will be allowed
-to grow indefinitely.</p>
+style='mso-spacerun:yes'> </span>If value is set to 0, the file will be
+allowed to grow indefinitely.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7084"></a><a
-name="_Toc115416148"><span style='mso-bookmark:_Toc115417084'>4.3. afsd_service
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6148"></a><a
+name="_Toc115417084"><span style='mso-bookmark:_Toc115416148'>4.3. afsd_service
debug logs (fs trace {-on, -off, -dump} ->%WinDir%\TEMP\afsd.log)</span></a></h2>
<p class=MsoNormal>When attempting to debug the behavior of the SMB/CIFS Server
any one time is 5000.<span style='mso-spacerun:yes'> </span>This can be
adjusted with the <a href="#_Value_:_TraceBufferSize">registry value</a>:</p>
-<p class=PreformattedText><span style='mso-spacerun:yes'> </span><span
-style='mso-spacerun:yes'> </span>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p>
+<p class=PreformattedText><span style='mso-spacerun:yes'>
+</span>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p>
<p class=PreformattedText><span style='mso-spacerun:yes'>
</span>REG_DWORD<span style='mso-spacerun:yes'> </span>TraceBufferSize </p>
to clear to the log and "fs trace -dump" to output the contents of
the log to the file.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7085"></a><a
-name="_Toc115416149"><span style='mso-bookmark:_Toc115417085'>4.4. Using
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6149"></a><a
+name="_Toc115417085"><span style='mso-bookmark:_Toc115416149'>4.4. Using
SysInternal\92s DbgView and FileMon Tools</span></a></h2>
<p class=MsoNormal>An alternatve option to the use of "fs trace
style='mso-spacerun:yes'> </span>When the OpenAFS Client Service starts and
Bit 2 of the <a href="#_Value__:_TraceOption">TraceOption</a> value in the
registry is set, all trace log events are output using the Windows Debug
-Monitor interface (OutputDebugString).<span style='mso-spacerun:yes'> </span></p>
+Monitor interface (OutputDebugString). <span style='mso-spacerun:yes'> </span></p>
-<p class=PreformattedText><span style='mso-spacerun:yes'> </span>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p>
+<p class=PreformattedText><span style='mso-spacerun:yes'>
+</span>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p>
<p class=PreformattedText style='text-indent:12.0pt'>REG_DWORD<span
style='mso-spacerun:yes'> </span>TraceOption = 0x04</p>
style='mso-spacerun:yes'> </span>The captured data can be stored to files for
inclusion in bug reports.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7086"></a><a
-name="_Toc115416150"><span style='mso-bookmark:_Toc115417086'>4.5. Microsoft
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6150"></a><a
+name="_Toc115417086"><span style='mso-bookmark:_Toc115416150'>4.5. Microsoft
MiniDumps <br>
(fs minidump -> %WinDir%\TEMP\afsd.dmp)</span></a></h2>
of a MiniDump file containing the state of all of the threads in the AFS Client
Service process.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7087"></a><a
-name="_Toc115416151"><span style='mso-bookmark:_Toc115417087'>4.6. Single
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6151"></a><a
+name="_Toc115417087"><span style='mso-bookmark:_Toc115416151'>4.6. Single
Sign-on (Integrated Logon) debugging</span></a></h2>
<p class=MsoNormal>If you are having trouble with the Integrated Logon
Event Handlers to log information to the Windows Event Log: Application under
the name \93AFS Logon".</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7088"></a><a
-name="_Toc115416152"><span style='mso-bookmark:_Toc115417088'>4.7. RX (AFS RPC)
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6152"></a><a
+name="_Toc115417088"><span style='mso-bookmark:_Toc115416152'>4.7. RX (AFS RPC)
debugging (rxdebug)</span></a></h2>
<p class=MsoNormal>The rxdebug.exe tool can be used to query a variety of
<p class=PreformattedText><span style='mso-spacerun:yes'>
</span>-peers<span style='mso-spacerun:yes'> </span>show peers</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7089"></a><a
-name="_Toc115416153"><span style='mso-bookmark:_Toc115417089'>4.8. Cache
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6153"></a><a
+name="_Toc115417089"><span style='mso-bookmark:_Toc115416153'>4.8. Cache
Manager debugging (cmdebug)</span></a></h2>
<p class=MsoNormal>The cmdebug.exe tool can be used to query the state of the
</span>-cache<span style='mso-spacerun:yes'> </span>print only cache
configuration</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7090"></a><a
-name="_Toc115416154"><span style='mso-bookmark:_Toc115417090'>4.9. Persistent
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6154"></a><a
+name="_Toc115417090"><span style='mso-bookmark:_Toc115416154'>4.9. Persistent
Cache consistency check</span></a></h2>
<p class=MsoNormal>The persistent cache is stored in a Hidden System file at
<p class=PreformattedText><span style='mso-spacerun:yes'> </span>afsd_service.exe
--validate-cache <cache-path></p>
-<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7113"></a><a
-name="_Toc115417091"></a><a name="_Toc115416155"><span style='mso-bookmark:
-_Toc115417091'><span style='mso-bookmark:_Toc115417113'>5. Reporting Bugs:</span></span></a></h1>
+<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6155"></a><a
+name="_Toc115417091"></a><a name="_Toc115417113"><span style='mso-bookmark:
+_Toc115417091'><span style='mso-bookmark:_Toc115416155'>5. Reporting Bugs:</span></span></a></h1>
<p class=MsoNormal>Bug reports should be sent to <a
href="mailto:openafs-bugs@openafs.org?subject=Bug%20Report">openafs-bugs@openafs.org</a>.<span
<p class=MsoNormal>When reporting a error, please be sure to include the
version of OpenAFS.</p>
-<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7114"></a><a
-name="_Toc115417092"></a><a name="_Toc115416156"><span style='mso-bookmark:
-_Toc115417092'><span style='mso-bookmark:_Toc115417114'>6. How to Contribute to
+<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6156"></a><a
+name="_Toc115417092"></a><a name="_Toc115417114"><span style='mso-bookmark:
+_Toc115417092'><span style='mso-bookmark:_Toc115416156'>6. How to Contribute to
the Development of OpenAFS for Windows</span></span></a></h1>
<p class=MsoNormal>Contributions to the development of OpenAFS for Windows are
take many forms including cash donations, support contracts, donated developer
time, and even donated tech writer time.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7093"></a><a
-name="_Toc115416157"><span style='mso-bookmark:_Toc115417093'>6.1. The USENIX
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6157"></a><a
+name="_Toc115417093"><span style='mso-bookmark:_Toc115416157'>6.1. The USENIX
OpenAFS Fund</span></a> </h2>
<p class=MsoBodyText><a href="http://www.usenix.org/">USENIX</a>, a 501c3
<div class=Section2>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7099"></a><a
-name="_Toc115416159"><span style='mso-bookmark:_Toc115417099'>7.1. Introduction</span></a></h2>
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6159"></a><a
+name="_Toc115417099"><span style='mso-bookmark:_Toc115416159'>7.1. Introduction</span></a></h2>
<p class=MsoNormal>A MSI installer option is available for those who wish to
use Windows Installer for installing OpenAFS and for organizations that wish to
style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'>
</span></span><![endif]>msitran -a openafs-transform.mst openafs-test.msi</p>
-<p class=MsoNormal>and then checking the resulting openafs-test.msi to see if
-all changes you have made above to openafs-modified.msi is present in
+<p class=MsoNormal>and then checking the resulting openafs-test.msi to see if all
+changes you have made above to openafs-modified.msi is present in
openafs-test.msi.<span style='mso-spacerun:yes'> </span>'msitran' will
complain if some modification in the transform can not be successfully applied.</p>
the MSI databases directly when editing openafs-modified.msi.<span
style='mso-spacerun:yes'> </span>More details are given below.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7100"></a><a
-name="_Toc115416162"><span style='mso-bookmark:_Toc115417100'>7.2.
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6162"></a><a
+name="_Toc115417100"><span style='mso-bookmark:_Toc115416162'>7.2.
Configuration Options</span></a></h2>
<p class=MsoNormal>The logic necessary to implement many of the settings
style='mso-spacerun:yes'> </span>: '1' or '0'</p>
<p class=MsoList style='mso-yfti-cnfc:1'>Controls whether AFSCreds.exe starts
up automatically when the user logs on.<span style='mso-spacerun:yes'>
- </span>When CREDSSTARTUP is '1' a shortcut is added to the 'Startup' folder in
- the 'Program menu' which starts AFSCREDS.EXE with the options that are
+ </span>When CREDSSTARTUP is '1' a shortcut is added to the 'Startup' folder
+ in the 'Program menu' which starts AFSCREDS.EXE with the options that are
determined by the other CREDS* properties.</p>
</td>
</tr>
</tr>
</table>
-<p class=MsoNormal style='margin-left:35.45pt'>Note that the ComponentId is an uppercase
-GUID.<span style='mso-spacerun:yes'> </span>You can generate one using
-GUIDGEN.EXE or UUIDGEN.EXE, both of which are included in the Platform SDK.</p>
+<p class=MsoNormal style='margin-left:35.45pt'>Note that the ComponentId is an
+uppercase GUID.<span style='mso-spacerun:yes'> </span>You can generate one
+using GUIDGEN.EXE or UUIDGEN.EXE, both of which are included in the Platform
+SDK.</p>
<p class=MsoNormal style='margin-left:35.45pt'>The Attributes value of 144 is a
-sum of msidbComponentAttributesPermanent (16) and
-msidbComponentAttributesNeverOverwrite (128).<span style='mso-spacerun:yes'>
-</span>This ensures that local modifications are not overwritten or lost during
-an installation or uninstallation.<span style='mso-spacerun:yes'> </span>These
-are the same settings used on the default configuration files.</p>
+sum of msidbComponentAttributesPermanent (16) and msidbComponentAttributesNeverOverwrite
+(128).<span style='mso-spacerun:yes'> </span>This ensures that local
+modifications are not overwritten or lost during an installation or
+uninstallation.<span style='mso-spacerun:yes'> </span>These are the same
+settings used on the default configuration files.</p>
<p class=MsoNormal><span style='mso-tab-count:1'> </span>'fil_my_CellServDB'
is a key into the 'File' table which we will fill later.</p>
</table>
<p class=MsoNormal style='margin-left:35.45pt'>It is important to create the
-new feature under the 'feaClient' feature, which will ensure that the
-configuration file will be installed when the client binaries are installed.</p>
+new feature under the 'feaClient' feature, which will ensure that the configuration
+file will be installed when the client binaries are installed.</p>
<p class=MsoNormal style='margin-left:35.45pt'>Setting 'Display' to 0 will hide
this feature from the feature selection dialog during an interactive
<p class=MsoNormal><span style='mso-tab-count:1'> </span><span
style='mso-spacerun:yes'> </span>(leave other fields blank)</p>
-<p class=MsoNormal style='margin-left:35.45pt'>The 'Attributes' value is
-msidbFileAttributesNonCompressed (8192).<span style='mso-spacerun:yes'>
-</span>This is because we will be placing this file in the same directory as the
-MSI instead of embedding the file in it.<span style='mso-spacerun:yes'>
-</span>Transforms do not support updating compressed sources or adding new
-cabinet streams.</p>
+<p class=MsoNormal style='margin-left:35.45pt'>The 'Attributes' value is msidbFileAttributesNonCompressed
+(8192).<span style='mso-spacerun:yes'> </span>This is because we will be
+placing this file in the same directory as the MSI instead of embedding the
+file in it.<span style='mso-spacerun:yes'> </span>Transforms do not support
+updating compressed sources or adding new cabinet streams.</p>
<p class=MsoNormal style='margin-left:35.45pt'>Finally, the 'Sequence' value of
1000 will be used later to distinguish the file as being in a separate source
<p class=MsoNormal><span style='mso-tab-count:1'> </span><span
style='mso-spacerun:yes'> </span>(leave other fields blank)</p>
-<p class=MsoNormal style='margin-left:35.45pt'>The sequence number of 1000 designates
-this as the media source for the newly added file.</p>
+<p class=MsoNormal style='margin-left:35.45pt'>The sequence number of 1000
+designates this as the media source for the newly added file.</p>
<h4><a name="_Toc115416193"></a><a name="_2.3.1_Components_for_Configuration_"></a><span
style='mso-bookmark:_Toc115416193'>7.2.3.1 Components for Configuration Files</span></h4>
<p class=MsoNormal><span style='mso-spacerun:yes'> </span>Columns that are
unspecified should be left empty.</p>
-<p class=MsoNormal><span style='mso-spacerun:yes'> </span>We create a new feature
-and component to hold the new registry keys.</p>
+<p class=MsoNormal><span style='mso-spacerun:yes'> </span>We create a new
+feature and component to hold the new registry keys.</p>
<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0
style='mso-cellspacing:2.0pt;mso-yfti-tbllook:480;mso-padding-alt:0pt 5.4pt 0pt 5.4pt;
</tr>
<tr style='mso-yfti-irow:1'>
<td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'>
- <p class=MsoNormal><span style='mso-spacerun:yes'> </span>'Component'
- table:</p>
+ <p class=MsoNormal><span style='mso-spacerun:yes'> </span>'Component' table:</p>
</td>
</tr>
<tr style='mso-yfti-irow:2'>
</tr>
<tr style='mso-yfti-irow:5'>
<td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'>
- <p class=MsoNormal><span style='mso-spacerun:yes'> </span><span
- style='mso-spacerun:yes'> </span>'Registry' table:</p>
+ <p class=MsoNormal><span style='mso-spacerun:yes'> </span>'Registry'
+ table:</p>
</td>
</tr>
<tr style='mso-yfti-irow:6'>
<span style='mso-tab-count:1'> </span>Root<span style='mso-tab-count:
2'> </span>: 2<br>
<span style='mso-tab-count:1'> </span>Key<span style='mso-tab-count:
- 2'> </span>: 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'<br>
+ 2'> </span>:
+ 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'<br>
<span style='mso-tab-count:1'> </span>Name<span style='mso-tab-count:
2'> </span>: '*'<br>
<span style='mso-tab-count:1'> </span>Component<span
<span style='mso-tab-count:1'> </span>Root<span style='mso-tab-count:
2'> </span>: 2<br>
<span style='mso-tab-count:1'> </span>Key<span style='mso-tab-count:
- 2'> </span>:
- 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'<br>
+ 2'> </span>: 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'<br>
<span style='mso-tab-count:1'> </span>Name<span style='mso-tab-count:
2'> </span>: '*'<br>
<span style='mso-tab-count:1'> </span>Component<span
<span style='mso-tab-count:1'> </span>Root<span style='mso-tab-count:
2'> </span>: 2<br>
<span style='mso-tab-count:1'> </span>Key<span style='mso-tab-count:
- 2'> </span>: 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br>
+ 2'> </span>:
+ 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br>
<span style='mso-tab-count:1'> </span>Name<span style='mso-tab-count:
2'> </span>: 'FailLoginsSilently'<br>
<span style='mso-tab-count:1'> </span>Value<span style='mso-tab-count:
<p class=MsoNormal><o:p> </o:p></p>
-<p class=MsoNormal>The example adds domain specific keys for 'ATHENA.MIT.EDU' (enable
-integrated logon) and 'LOCALHOST' (disable integrated logon and fail logins
-silently).</p>
+<p class=MsoNormal>The example adds domain specific keys for 'ATHENA.MIT.EDU'
+(enable integrated logon) and 'LOCALHOST' (disable integrated logon and fail
+logins silently).</p>
<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc115416195">7.2.5
Adding Site Specific Freelance Registry Keys</a></h3>
athena.mit.edu cell's root.afs volume as well as a read-write mountpoint.<span
style='mso-spacerun:yes'> </span>Aliases are also provided using symlinks.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_
Toc115417101"></a><a
-name="_Toc115416196"></a><a name="_Ref115275867"><span style='mso-bookmark:
-_Toc115416196'><span style='mso-bookmark:_Toc115417101'>7.3 Additional
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_
Ref115275867"></a><a
+name="_Toc115416196"></a><a name="_Toc115417101"><span style='mso-bookmark:
+_Toc115416196'><span style='mso-bookmark:_Ref115275867'>7.3 Additional
Resources</span></span></a></h2>
<p class=MsoNormal>If you want to add registry keys or files you need to create
<p class=MsoNormal>See the Platform SDK documentation for information on
command line options for MSITRAN.EXE.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7102"></a><a
-name="_Toc115416197"><span style='mso-bookmark:_Toc115417102'>7.4. Upgrades</span></a></h2>
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6197"></a><a
+name="_Toc115417102"><span style='mso-bookmark:_Toc115416197'>7.4. Upgrades</span></a></h2>
<p class=MsoNormal>The MSI package is designed to replace (or uninstall)
previous versions of OpenAFS for Windows during installation.<span
style='mso-bookmark:_Toc115417116'><span style='mso-bookmark:_Toc115417103'><span
style='mso-bookmark:_Toc115416198'>Appendix A: Registry Values</span></span></span></h1>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7104"></a><a
-name="_Toc115416199"><span style='mso-bookmark:_Toc115417104'>A.1. Service
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6199"></a><a
+name="_Toc115417104"><span style='mso-bookmark:_Toc115416199'>A.1. Service
parameters</span></a></h2>
<p class=MsoBodyText>The service parameters primarily affect the behavior of
Variable: cm_mountRoot</p>
<p class=MsoBodyText>Name of root mount point.<span
style='mso-spacerun:yes'> </span>In symlinks, if a path starts with
- cm_mountRoot, it is assumed that the path is absolute (as opposed to relative)
- and is adjusted accordingly. Eg: if a path is specified as
+ cm_mountRoot, it is assumed that the path is absolute (as opposed to
+ relative) and is adjusted accordingly. Eg: if a path is specified as
/afs/athena.mit.edu/foo/bar/baz and cm_mountRoot is "/afs", then
the path is interpreted as \\afs\all\athena.mit.edu\foo\bar\baz.<span
style='mso-spacerun:yes'> </span>If a path does not start with with
<p class=MsoBodyText>Type: DWORD {0 .. MAXDWORD}<br>
Default: 100K</p>
<p class=MsoBodyText>This entry determines the maximum size of the
- %WINDIR%\TEMP\afsd_init.log file.<span style='mso-spacerun:yes'> </span>If the
- file is larger than this value when afsd_service.exe starts the file will be
- reset to 0 bytes.<span style='mso-spacerun:yes'> </span>If this value is 0,
- it means the file should be allowed to grow indefinitely.</p>
+ %WINDIR%\TEMP\afsd_init.log file.<span style='mso-spacerun:yes'> </span>If
+ the file is larger than this value when afsd_service.exe starts the file will
+ be reset to 0 bytes.<span style='mso-spacerun:yes'> </span>If this value is
+ 0, it means the file should be allowed to grow indefinitely.</p>
</td>
</tr>
- <tr style='mso-yfti-irow:34;mso-yfti-lastrow:yes;height:65.75pt'>
+ <tr style='mso-yfti-irow:34;height:65.75pt'>
<td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt;
height:65.75pt'>
<h5><a name="_Toc115416236">Value: FlushOnHibernate</a></h5>
hibernate or stand-by.</p>
</td>
</tr>
+ <tr style='mso-yfti-irow:35;height:65.75pt'>
+ <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt;
+ height:65.75pt'>
+ <h5>Value: RxEnablePeerStats</h5>
+ <p class=MsoBodyText>Type: REG_DWORD<br>
+ Default: 0x0</p>
+ <p class=MsoBodyText>This value will enable the gathering of RX Statistics
+ for connections with the Cache Manager\92s Peers.<span
+ style='mso-spacerun:yes'> </span>This functionality can be adjusted at
+ runtime with the \93fs rxstatpeer\94 command.</p>
+ </td>
+ </tr>
+ <tr style='mso-yfti-irow:36;mso-yfti-lastrow:yes;height:65.75pt'>
+ <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt;
+ height:65.75pt'>
+ <h5>Value: RxEnableProcessStats<o:p></o:p></h5>
+ <p class=MsoBodyText>Type: REG_DWORD<br>
+ Default: 0x0<o:p></o:p></p>
+ <p class=MsoBodyText>This value will enable the gathering of RX Statistics
+ for the Cache Manager\92s Process.<span style='mso-spacerun:yes'> </span>This
+ functionality can be adjusted at runtime with the \93fs rxstatproc\94 command.<o:p></o:p></p>
+ </td>
+ </tr>
</table>
<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc115416237">Regkey:<br>
CellServDBDir</span></h5>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>Type: REG_SZ<br>
Default: <not defined></p>
- <p class=MsoBodyText style='mso-yfti-cnfc:1'>Specifies the directory
- containing the CellServDB file.<span style='mso-spacerun:yes'> </span>When
- this value is not specified, the AFS Client install directory is used.</p>
+ <p class=MsoBodyText style='mso-yfti-cnfc:1'>Specifies the directory containing
+ the CellServDB file.<span style='mso-spacerun:yes'> </span>When this value
+ is not specified, the AFS Client install directory is used.</p>
</td>
</tr>
<tr style='mso-yfti-irow:0;height:145.25pt'>
MiniDumpWithCodeSegs = 0x00002000</p>
</td>
</tr>
- <tr style='mso-yfti-irow:3;height:138.25pt'>
+ <tr style='mso-yfti-irow:3;mso-yfti-lastrow:yes;height:138.25pt'>
<td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt;
height:138.25pt'>
<h5><a name="_Toc115416244"></a><a name="_Value___:_StoreAnsiFilenames"></a><span
<p class=MsoBodyText>Type: REG_DWORD<br>
Default: 0x0</p>
<p class=MsoBodyText>This value can be used to force the AFS Client Service
- to store filenames using the Windows system's ANSI character set instead of
- the OEM Code Page character set which has traditionally been used by SMB file
+ to store filenames using the Windows system's ANSI character set instead of the
+ OEM Code Page character set which has traditionally been used by SMB file
systems.<span style='mso-spacerun:yes'> </span></p>
<p class=MsoBodyText>Note: The use of ANSI characters will render access to
files with 8-bit OEM file names unaccessible from Windows.<span
UNIX systems and vice versa.</p>
</td>
</tr>
- <tr style='mso-yfti-irow:4;height:138.25pt'>
- <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt;
- height:138.25pt'>
- <h5>Value: RxEnablePeerStats</h5>
- <p class=MsoBodyText>Type: REG_DWORD<br>
- Default: 0x0</p>
- <p class=MsoBodyText>This value will enable the gathering of RX Statistics
- for connections with the Cache Manager\92s Peers.<span
- style='mso-spacerun:yes'> </span>This functionality can be adjusted at
- runtime with the \93fs rxstatpeer\94 command.</p>
- </td>
- </tr>
- <tr style='mso-yfti-irow:5;mso-yfti-lastrow:yes;height:138.25pt'>
- <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt;
- height:138.25pt'>
- <h5>Value: RxEnableProcessStats<o:p></o:p></h5>
- <p class=MsoBodyText>Type: REG_DWORD<br>
- Default: 0x0<o:p></o:p></p>
- <p class=MsoBodyText>This value will enable the gathering of RX Statistics
- for the Cache Manager\92s Process.<span style='mso-spacerun:yes'> </span>This
- functionality can be adjusted at runtime with the \93fs rxstatproc\94 command.<o:p></o:p></p>
- </td>
- </tr>
</table>
<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc115416245">Regkey:<br>
ip address"</a></h5>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>Type: REG_DWORD<br>
Default: <none></p>
- <p class=MsoBodyText style='mso-yfti-cnfc:1'>This key is used to specify a
- default set of File server preferences. For each entry the value name will be
- either the IP address of a server or a fully qualified domain name.<span
+ <p class=MsoBodyText style='mso-yfti-cnfc:1'>This key is used to specify a default
+ set of File server preferences. For each entry the value name will be either
+ the IP address of a server or a fully qualified domain name.<span
style='mso-spacerun:yes'> </span>The value will be the ranking.<span
style='mso-spacerun:yes'> </span>The ranking will be adjusted by a random
value between 0 and 256 prior to the preference being set.</p>
</tr>
</table>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7105"></a><a
-name="_Toc115416257"><span style='mso-bookmark:_Toc115417105'>A.2. Integrated
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6257"></a><a
+name="_Toc115417105"><span style='mso-bookmark:_Toc115416257'>A.2. Integrated
Logon Network provider parameters</span></a></h2>
<p class=MsoBodyText>Affects the network provider (afslogon.dll).</p>
<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc115416273">Example:</a></h3>
-<p class=PreformattedText><span style='mso-spacerun:yes'> </span>HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider</p>
+<p class=PreformattedText><span
+style='mso-spacerun:yes'> </span>HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider</p>
<p class=PreformattedText><span style='mso-spacerun:yes'> </span>|</p>
LogonOptions</span></h5>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>Type: DWORD<br>
Default: 0x01</p>
- <p class=MsoBodyText style='mso-yfti-cnfc:1'>NSIS/WiX: depends on user
- configuration</p>
+ <p class=MsoBodyText style='mso-yfti-cnfc:1'>NSIS/WiX: depends on user configuration</p>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>0x00 - Integrated Logon is not
used<br>
0x01 - Integrated Logon is used<br>
0x02 - High Security Mode is used (deprecated)<br>
0x03 - Integrated Logon with High Security Mode is used (deprecated)</p>
- <p class=MsoBodyText style='mso-yfti-cnfc:1'>High Security Mode generates
- random SMB names for the creation of Drive Mappings.<span
- style='mso-spacerun:yes'> </span>This mode should not be used without
- Integrated Logon.</p>
+ <p class=MsoBodyText style='mso-yfti-cnfc:1'>High Security Mode generates random
+ SMB names for the creation of Drive Mappings.<span style='mso-spacerun:yes'>
+ </span>This mode should not be used without Integrated Logon.</p>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>As of 1.3.65 the SMB server
supports SMB authentication.<span style='mso-spacerun:yes'> </span>The High
Security Mode should not be used when using SMB authentication (SMBAuthType
l15 level1 lfo36;tab-stops:list 36.0pt'><![if !supportLists]><span
style='mso-fareast-font-family:Thorndale;mso-bidi-font-family:Thorndale'><span
style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'>
-</span></span></span><![endif]>NP key.
-("HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider")</p>
+</span></span></span><![endif]>NP key. ("HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider")</p>
<p class=MsoBodyText style='margin-left:36.0pt;text-indent:-18.0pt;mso-list:
l15 level1 lfo36;tab-stops:list 36.0pt'><![if !supportLists]><span
security setting.<span style='mso-spacerun:yes'> </span>Please be aware of
this when setting this value.</p>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7107"></a><a
-name="_Toc115416286"><span style='mso-bookmark:_Toc115417107'>A.3. AFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6286"></a><a
+name="_Toc115417107"><span style='mso-bookmark:_Toc115416286'>A.3. AFS
Credentials System Tray Tool parameters</span></a></h2>
<p class=MsoBodyText>Affects the behavior of afscreds.exe</p>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>Type: DWORD {0, 1}<br>
Default: <none><br>
Function: LoadRemind(), SaveRemind()</p>
- <p class=MsoBodyText style='mso-yfti-cnfc:1'>These values are used to save
- and restore the state of the reminder flag for each cell for which the user
- has obtained tokens.</p>
+ <p class=MsoBodyText style='mso-yfti-cnfc:1'>These values are used to save and
+ restore the state of the reminder flag for each cell for which the user has
+ obtained tokens.</p>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>This value used to be stored at
[HKLM\Software\TransarcCorporation\AFS Client\AfsCreds].</p>
</td>
Default: <none></p>
<p class=MsoBodyText style='mso-yfti-cnfc:1'>These values are used to store
the AFS path in UNIX notation to which the drive letter is to be mapped.</p>
- <p class=MsoBodyText style='mso-yfti-cnfc:1'>These values used to be stored
- in the afsdsbmt.ini file.</p>
+ <p class=MsoBodyText style='mso-yfti-cnfc:1'>These values used to be stored in
+ the afsdsbmt.ini file.</p>
</td>
</tr>
</table>
-<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
7108"></a><a
-name="_Toc115416303"><span style='mso-bookmark:_Toc115417108'>A.4 OpenAFS
+<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc11541
6303"></a><a
+name="_Toc115417108"><span style='mso-bookmark:_Toc115416303'>A.4 OpenAFS
Client Service Environment Variables</span></a></h2>
<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0
projects / packages / o / openafs.git / commitdiff