From: Jeffrey Altman Date: Mon, 18 Dec 2006 23:20:57 +0000 (+0000) Subject: DEVEL15-windows-release-notes-20061218 X-Git-Tag: openafs-devel-1_5_13~22 X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=c21725d4b7948ad82729e86bf410dbc8867fee41;p=packages%2Fo%2Fopenafs.git DEVEL15-windows-release-notes-20061218 update information on afs server installs for 1.5.13 --- diff --git a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm index 115ae9af7..b6c5f0827 100644 --- a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm +++ b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm @@ -40,16 +40,18 @@ w\:* {behavior:url(#default#VML);} name="place"/>

+src="relnotes_files/image002.jpg" v:shapes="_x0000_i1025">

The Network Identity Manager replaces the former KFW ticket manager, Leash”, and when combined with the OpenAFS plug-in is intended to be @@ -954,9 +956,9 @@ prevent the AFS System Tray Tool from being started by Windows after login.   A shortcut to the OpenAFS Control Panel is also provided.

-

3.2. Use of the Microsoft Loopback Adapter by the AFS Client Service

@@ -1013,9 +1015,9 @@ no longer required to be unique.  Instead the NETBIOS name associated with the AFS Client Service is simply "AFS" and portable UNC paths of the form \\AFS\cellname\path can now be used on all machines.

-

3.3. Using Freelance (Dynamic Root) Mode to Improve Mobility

@@ -1084,9 +1086,9 @@ symlink to 'athena.mit.edu\user\j\a\jaltman'

HKLM\SOFTWARE\OpenAFS\Client\Freelance\Symlinks 

-

3.4. Locating AFS Volume Database Servers via DNS

@@ -1095,9 +1097,9 @@ discover the location of AFS Volume Database servers when entries for the cell are not present in the client's CellServDB file (\%PROGRAMFILES%\OpenAFS\Client\CellServDB).

-

3.5. Obtaining AFS Tokens as a Integrated Part of Windows Logon

@@ -1135,9 +1137,9 @@ multiple cells.  For further information on how to configure this feature read about the TheseCells value.

-

3.6. AFS System Tray Command Line Options

@@ -1188,9 +1190,9 @@ options may be altered via the registry on either per machine or per user basis.  See AfscredsShortcutParams in Appendix A.

-

3.7. The “AFS Client Admins” Authorization Group

@@ -1269,9 +1271,9 @@ implicit member of the "AFS Client Admins" group.

the registry and not via "fs sysname".

-

3.8. OpenAFS support for UNC paths

@@ -1294,9 +1296,9 @@ language.

JPSoftware's web site is http://www.jpsoft.com.

-

3.9. OpenAFS includes aklog.exe

@@ -1337,9 +1339,9 @@ Kerberos IV tickets

   -m = use krb524d to convert Kerberos V tickets to Kerberos IV

-

3.10. OpenAFS Servers on Windows are Unsupported

@@ -1348,28 +1350,51 @@ install package might work but should be considered highly experimental.  It has not been thoroughly tested.  Any data which would cause pain if lost should not be stored in an OpenAFS Server on Windows.

+

3.10.1. OpenAFS Server Installation

+ +

When the OpenAFS Server is installed, the TransarcAFSServer +service (bosctlsvc.exe) will be installed and configured.  The TransarcAFSServer service will auto-start +the traditional AFS bos server.  The +former AFS Server Configuration wizard makes assumptions that no longer hold +true.  As a result, the installation +process will fail.  However, following +the instructions for installing the AFS Servers on UNIX it is possible to +properly configure the AFS Servers on Microsoft Windows.  The AFS Server binaries, configuration files, +and log files are installed under %Program Files%\OpenAFS\Server.   kaserver is deprecated and its +use is strongly discouraged.  +Instead, Active Directory or some other Kerberos 5 KDC should be used in +its place.

+ +

3.10.2. Using the AFS Client Service when the +Server is installed

+

A few notes on the usage of the AFS Client Service if it is going to be used with the OpenAFS AFS Server:

·       When -installed on the same machine as the AFS Server, Freelance mode must be turned -off.  Otherwise, you will be unable to manipulate the contents of the -root.afs volume for the hosted cell.

+font-family:"Times New Roman"'>       Freelance +mode should be disabled when the AFS Client Service is installed on the same +machine as the AFS Server,.  Otherwise, you will be unable to manipulate the +contents of the root.afs volume for the hosted cell without constructing an +explicit mountpoint to the root.afs volume from another volume.

·       The AFS Server and related tools only support the built in kaserver (Kerberos -IV).  If the AFS Server is being used, MIT Kerberos for Windows should not be -installed or must be disabled via the EnableKFW -registry value.

+IV).  If kaserver is being used, MIT +Kerberos for Windows should not be installed or must be disabled via the EnableKFW registry value. 

-

3.11. OpenAFS Debugging Symbol files

@@ -1402,9 +1427,9 @@ font-family:"Times New Roman"'>       wheth or not additional debug statements were compiled into the binaries (release: no, debug: yes)

-

3.12. Large Files (64-bit) Supported

@@ -1413,9 +1438,9 @@ larger than 2GB.  The maximum file size is now 16777216 terabytes when the AFS File Server supports large files.   If the AFS File Server does not support large files, then the file size limit remains 2GB.

-

3.13. Encrypted AFS File Access

@@ -1426,17 +1451,17 @@ Encrypted data transfer can be turned on or off with the command.  Transitions between “crypt” and “non-crypt” modes are logged to the Windows Application Event Log.

-

3.14. Authenticated Access to the OpenAFS Client Service

OpenAFS authenticates SMB connections using either NTLM or -GSS SPNEGO (NTLM).  In previous versions of OpenAFS, the SMB connections -were unauthenticated which opened the door for several attacks which could be -used to obtain access to another user's tokens on shared -machines.   

+GSS SPNEGO (NTLM).  In previous versions of OpenAFS, the SMB connections were +unauthenticated which opened the door for several attacks which could be used +to obtain access to another user's tokens on shared machines.    +

When GSS SPNEGO attempts a Kerberos 5 authentication, the Windows SMB client will attempt to retrieve service tickets for @@ -1449,9 +1474,9 @@ will be used that does not require access to the user's password.  Instead, Windows will internally recognize the request as coming from a local logon session.

-

3.15. No More INI Files

@@ -1468,23 +1493,22 @@ file to the new CellServDB file.  OpenAFS will also import the contents of the “afs_freelance.ini” file to the Windows registry.   OpenAFS will not process the contents of the “afsddbmt.ini”.

-

3.16. Microsoft Windows Internet Connection Firewall

The OpenAFS Client is compatible with the Internet Connection Firewall that debuted with Windows XP SP2 and Windows 2003 -SP1.  The Internet Connection Firewall will be automatically adjusted to -allow the receipt of incoming callback messages from the AFS file server.  -In addition, the appropriate Back Connection registry entries are added -to allow SMB authentication to be performed across the Microsoft Loopback -Adapter.

+SP1.  The Internet Connection Firewall will be automatically adjusted to allow +the receipt of incoming callback messages from the AFS file server.  In +addition, the appropriate Back Connection registry entries are added to +allow SMB authentication to be performed across the Microsoft Loopback Adapter.

-

3.17. Browsing AFS from the Explorer Shell and Office

@@ -1493,9 +1517,9 @@ Protocol which allows Explorer to browse server and share information. This significantly enhances the interoperability of AFS volumes within the Explorer Shell and Microsoft Office applications.

-

3.18. Byte Range Locking

@@ -1527,15 +1551,14 @@ then you can obtain a read lock.  If you can write or create a file, then you can obtain a write lock.  In AFS if you can write to a file, then you can obtain a write lock.  However, in AFS if you can read a file it does not mean that you can obtain a read lock on it.   The ability to -obtain read locks is granted only if you have the lock (or ‘k’) -privilege.  This behavior is required in order to allow anonymous users to -read files while preventing them from being able to deny access to the files to -other users.  OpenAFS 1.4.0 and earlier as well as all IBM AFS file -servers have an implementation bug that prevents users with write privileges -from being able to obtain locks without the lock privilege.  When AFS -serves data out of read-only volumes the file server will deny all requests for -read and write locks because the contents of the volume cannot be changed by -the client.

+obtain read locks is granted only if you have the lock (or ‘k’) privilege.  +This behavior is required in order to allow anonymous users to read files while +preventing them from being able to deny access to the files to other +users.  OpenAFS 1.4.0 and earlier as well as all IBM AFS file servers +have an implementation bug that prevents users with write privileges from being +able to obtain locks without the lock privilege.  When AFS serves data +out of read-only volumes the file server will deny all requests for read and +write locks because the contents of the volume cannot be changed by the client.

Since Microsoft Windows applications almost always attempt to obtain a temporary read lock when accessing files the OpenAFS Client’s @@ -1547,8 +1570,8 @@ inconvenience on end users. 

the file is located on a read-only volume and the application requests a read lock, the CIFS-AFS server will grant the lock request without asking the AFS file server. -
  • If the - file is located on a read-only volume and the application requests a write +
  • If + the file is located on a read-only volume and the application requests a write lock, the CIFS-AFS server will refuse the lock request and return a read only error.
  • If @@ -1582,27 +1605,27 @@ inconvenience on end users. 

    file server, this can be performed using the EnableServerLocks registry value.

    -

    3.19. Automatic Discarding of AFS Tokens at Logoff

    The OpenAFS Client will automatically forget a user's tokens upon Logoff unless the user's profile was loaded from an AFS volume.  In this situation there is no mechanism to determine when the profile has been -successfully written back to the network.  It is therefore unsafe to -release the user's tokens.  Whether or not the profile has been loaded -from the registry can be determined for Local Accounts, Active Directory -accounts and NT4 accounts.

    +successfully written back to the network.  It is therefore unsafe to release +the user's tokens.  Whether or not the profile has been loaded from the +registry can be determined for Local Accounts, Active Directory accounts and +NT4 accounts.

    If there is a need to disable this functionality, the LogoffPreserveTokens registry value can be used. (see Appendix A.)

    -

    3.20. Windows Terminal Server installations

    @@ -1612,9 +1635,9 @@ Panel.  Failure to do so will result in AFS not running properly.  The AFS Server should not be installed on a machine with Terminal Server installed.

    -

    3.21. Hidden Dot Files

    @@ -1625,9 +1648,9 @@ Hidden attribute so they will not normally be displayed.  This behavior can be altered via the HideDotFiles registry value.

    -

    3.22. Status Cache Limits

    @@ -1647,9 +1670,9 @@ maximum number of Status Cache entries.  Each entry requires approximately style='mso-spacerun:yes'>  This can be adjusted using the Stats registry value.

    -

    3.23. NETBIOS over TCP/IP must be enabled

    @@ -1660,9 +1683,9 @@ then communication with the AFS Client Service will be impossible.  If you are using the Microsoft Loopback Adapter, configure the “Netbios over TCP/IP” setting for the adapter.

    -

    3.24. OpenAFS binaries are digitally signed

    @@ -1681,9 +1704,9 @@ documents the "VerifyServiceSi registry value which can be used to disable the signature check.  The file version check cannot be disabled.

    -

    3.25. Maximum Size of the AFSCache File

    @@ -1696,21 +1719,21 @@ cache size greater then 700MB will result in the automatic disabling of the signature check.  Significantly larger cache sizes can be used on 64-bit Windows.

    -

    3.26. Filename Character Sets

    OpenAFS for Windows implements an SMB server which is used -as a gateway to the AFS filesystem.  Because of limitations of the SMB -implementation, Windows stores all files into AFS using OEM code pages such as -CP437 (United States) or CP850 (Western Europe).  These code pages are -incompatible with the ISO Latin-1 character set typically used as the default -on UNIX systems in both the United States -and Western Europe.  Filenames stored by -OpenAFS for Windows are therefore unreadable on UNIX systems if they include -any of the following characters:

    +as a gateway to the AFS filesystem.  Because of limitations of the SMB implementation, +Windows stores all files into AFS using OEM code pages such as CP437 (United +States) or CP850 (Western Europe).  These code pages are incompatible with +the ISO Latin-1 character set typically used as the default on UNIX systems in +both the United States and Western Europe.  Filenames stored by OpenAFS for +Windows are therefore unreadable on UNIX systems if they include any of the +following characters:

    @@ -1734,10 +1757,10 @@ any of the following characters:

    08/06  206  86  a ring

         [ç]  135  08/07  207  87  c cedilla

    -

         [ê]  136  - 08/08  210  88  e circumflex

    -

         [ë]  137  08/09  - 211  89  e diaeresis

    +

         [ê]  136  08/08  + 210  88  e circumflex

    +

         [ë]  137  + 08/09  211  89  e diaeresis

         [è]  138  08/10  212  8A  e grave

         [ï]  139  @@ -1746,8 +1769,8 @@ any of the following characters:

    08/12  214  8C  i circumflex

         [ì]  141  08/13  215  8D  i grave

    -

         [Ä]  142  - 08/14  216  8E  A diaeresis

    +

         [Ä]  142  08/14  + 216  8E  A diaeresis

         [Å]  143  08/15  217  8F  A ring

         [É]  144  @@ -1796,9 +1819,9 @@ Latin-1.  This setting is not the default setting because making this change would prevent OpenAFS for Windows from being able to access filenames containing the above characters which were created without this setting.

    -

    3.27. Known Character Set Issues with Roaming Profiles

    @@ -1811,9 +1834,9 @@ UNICODE.  To avoid this problem some sites run custom logoff scripts (assigned by group policy) which rename all files to use only the supported characters for the locale.

    -

    3.28. The AFSCache File

    @@ -1831,9 +1854,9 @@ consist of as few fragments as possible.   Significant performance gains can be achieved by defragmenting the AFSCache file with Sysinternal's Contig utility while the AFS Client Service is stopped.

    -

    3.29. Restricting OpenAFS Client Service Start and Stop

    @@ -1860,9 +1883,9 @@ afsd service by any ordinary user.

              -show  : Show current DACL (SDSF)

    -

    3.30. The @sys Name List

    @@ -1870,9 +1893,9 @@ The @sys Name List "x86_win32 i386_w2k i386_nt40" for 32-bit x86 systems.  The default is "amd64_win64" for amd 64-bit versions of Windows.

    -

    3.31. Symlinks to AFS UNC paths

    @@ -1880,9 +1903,9 @@ Symlinks to AFS UNC paths treated the same as symlinks to /afs/...  However, please use /afs/... as the Windows UNC form will not work on UNIX client.

    -

    3.32. Cache Manager Debugging Now Supported

    @@ -1903,9 +1926,9 @@ print only host interfaces

           -cache  print only cache configuration

    -

    3.33. Windows Logon Caching vs. Kerberos Logons

    @@ -1914,9 +1937,9 @@ principals to logon to Windows via a cross-realm relationship with a multi-domain Windows forest, you must enable Windows logon caching unless the workstation is Windows Vista.

    -

    3.34. Initial Server Preferences

    @@ -1927,9 +1950,9 @@ See Appendix A for details on the "Server Preferences" keys.

    -

    3.35. File Timestamps

    @@ -1951,9 +1974,9 @@ are used to being able to compare the timestamp in an UNIX shell with the timestamp from the Windows explorer.  During DST, these two times will no longer agree even though they are in fact representing the same moment in time.

    -

    3.36. Windows RPC client support must be installed

    @@ -1970,12 +1993,12 @@ are present and that they refer to the dll "rpcrt4.dll":

       HKLM "SOFTWARE\Microsoft\RPC\ClientProtocols" "ncadg_ip_udp"

    -

       HKLM -"SOFTWARE\Microsoft\RPC\ClientProtocols" "ncacn_http"

    +

       HKLM "SOFTWARE\Microsoft\RPC\ClientProtocols" +"ncacn_http"

    -

    3.37. Generating Minidumps of the OpenAFS Client Service

    @@ -1985,9 +2008,9 @@ dump file containing the current stack of the afsd_service.exe process.   This output can be very helpful when debugging the AFS Client Service when it is unresponsive to SMB/CIFS requests.

    -

    3.38. AFS Client Universally Unique Identifiers

    @@ -1995,20 +2018,20 @@ AFS Client Universally Unique Identifiers (UUIDs).  They are used to provide the server with a method of identifying the client that is independent of IP address.  The UUID is generated when the AFSCache file is created and is maintained as long as the contents of the -AFSCache file are kept intact.  The UUID is stored in the AFSCache file.   -When cloning machines that have Windows AFS client installed, the AFSCache -files should be deleted as part of the cloning process.

    +AFSCache file are kept intact.  The UUID is stored in the AFSCache +file.   When cloning machines that have Windows AFS client installed, +the AFSCache files should be deleted as part of the cloning process.

    -

    3.39. Delayed Write Errors with Microsoft +

    3.39. Delayed Write Errors with Microsoft Office Applications

    -

    Microsoft Office makes heavy use of asynchronous input/output -methods for reading and writing to file streams.  This can result in -hundreds of requests being simultaneously queued for service by the CIFS client -with a fixed timeout period.  As the AFS CIFS server is local to the -machine the Windows CIFS client believes that it can respond almost +

    Microsoft Office makes heavy use of asynchronous +input/output methods for reading and writing to file streams.  This can +result in hundreds of requests being simultaneously queued for service by the +CIFS client with a fixed timeout period.  As the AFS CIFS server is local +to the machine the Windows CIFS client believes that it can respond almost instantaneously to write requests as the actual writing to the AFS file server is performed by a background daemon thread.  When the actual network bandwidth to the AFS file server is slow and the file size is large it is @@ -2021,12 +2044,12 @@ with the explorer shell does not use asynchronous i/o.

    The CIFS session timeout defaults to 45 seconds and can be increased by modifying the registry.

    -

    3.40. Global Drives (aka 3.40. Global Drives (aka Service Drive +style='mso-bookmark:_Toc154229402'> Letters) are no longer supported by Microsoft

    The Global DriveAuto-mount feature has been deprecated due @@ -2045,9 +2068,9 @@ re-established until the machine is rebooted.

    applications should be modified to use of \\AFS\<cellname>\<path> instead of drive letters.

    -

    3.41. 64-bit Microsoft Windows Installations

    +

    3.41. 64-bit Microsoft Windows Installations

    Although 64-bit Windows platforms support both 64-bit and 32-bit applications, the OpenAFS Service installed on the machine must be @@ -2062,10 +2085,10 @@ for Windows can be used with the 32-bit OpenAFS Tools to manage AFS tokens.

    Without this restriction the AFS Cache File can become arbitrarily large limited only by available disk space.

    -

    3.42. Known Issues with Microsoft Windows 3.42. Known Issues with Microsoft Windows Vista

    OpenAFS for Windows works with Microsoft Windows Vista @@ -2101,10 +2124,10 @@ the necessary privilege separation, until that time some functions such as the Start and Stop Service features of the AFS System Tray tool and the AFS Control Panel will not work unless they are “Run as Administrator”.

    -

    4. How to Debug Problems with OpenAFS for Windows:

    OpenAFS for Windows provides a wide range of tools to assist @@ -2114,14 +2137,14 @@ years. OpenAFS developers, please collect as much information as possible and forward it as part of the bug

    -

    4.1. pioctl debugging (IoctlDebug +style='mso-bookmark:_Toc154229406'>IoctlDebug registry key)

    pioctl (path-based ioctl) calls are used by various tools to @@ -2187,9 +2210,9 @@ important parameters and their return code.   The MSDN Library and the Microsoft KnowledgeBase can be used as a reference to help you determine the configuration probem with your system.

    -

    4.2. afsd_service initialization log (%WinDir%\TEMP\afsd_init.log)

    @@ -2209,9 +2232,9 @@ file.  If the file is larger than this value when OpenAFS Client Service starts, the file will be reset to 0 bytes.  If value is set to 0, the file will be allowed to grow indefinitely.

    -

    4.3. afsd_service debug logs (fs trace {-on, -off, -dump} ->%WinDir%\TEMP\afsd.log)

    @@ -2232,9 +2255,9 @@ href="#_Value_:_TraceBufferSize">registry value:

    value.   Execute "fs trace -on" to clear to the log and "fs trace -dump" to output the contents of the log to the file.

    -

    4.4. Using SysInternal’s DbgView and FileMon Tools

    @@ -2252,8 +2275,8 @@ trace log events are output using the Windows Debug Monitor interface

    REG_DWORD   TraceOption = 0x04

    -

    Use “fs trace –on” and “fs trace –off” to toggle the -generation of log messages.

    +

    Use “fs trace –on” and “fs trace –off” to toggle the generation +of log messages.

    Sysinternal’s @@ -2269,9 +2292,9 @@ and the resulting OpenAFS Client Service operations.   The captured data can be stored to files for inclusion in bug reports.

    -

    4.5. Microsoft MiniDumps
    +

    4.5. Microsoft MiniDumps
    (fs minidump -> %WinDir%\TEMP\afsd.dmp)

    If the AFS Client Service become unresponsive to any form of @@ -2280,9 +2303,9 @@ with access to the source code and a debugger.   The "fs minidump" command can be used to force the generation of a MiniDump file containing the state of all of the threads in the AFS Client Service process.

    -

    4.6. Single Sign-on (Integrated Logon) debugging

    @@ -2300,9 +2323,9 @@ href="#_Value__:_TraceOption">TraceOption registry value:

    Event Handlers to log information to the Windows Event Log: Application under the name “AFS Logon".

    -

    4.7. RX (AFS RPC) debugging (rxdebug)

    @@ -2353,9 +2376,9 @@ conns

           -peers           show peers

    -

    4.8. Cache Manager debugging (cmdebug)

    @@ -2383,9 +2406,9 @@ print only cache entries with callbacks

           -cache      print only cache configuration

    -

    4.9. Persistent Cache consistency check

    @@ -2397,10 +2420,10 @@ on the file can be performed.

      afsd_service.exe --validate-cache <cache-path>

    -

    5. Reporting Bugs:

    Bug reports should be sent to openafs-bugs@openafs Please include as much information as possible about the issue.  If you are reporting a crash, please install the debugging symbols by re-running the installer.  If a dump file is available for the problem, -%WINDIR%\TEMP\afsd.dmp, include it along with the AFS Client Trace file  %WINDIR%\TEMP\afsd.log.  -The AFS Client startup log is %WINDIR%\TEMP\afsd_init.log.  Send the last -continuous block of  log information from this file.

    +%WINDIR%\TEMP\afsd.dmp, include it along with the AFS Client Trace file  +%WINDIR%\TEMP\afsd.log.  The AFS Client startup log is +%WINDIR%\TEMP\afsd_init.log.  Send the last continuous block of  log +information from this file.

    Configuring DrWatson to generate dump files for crashes:

    @@ -2482,10 +2506,10 @@ them and attach them to your e-mail.

    When reporting a error, please be sure to include the version of OpenAFS.

    -

    6. How to Contribute to the Development of OpenAFS for Windows

    Contributions to the development of OpenAFS for Windows are @@ -2493,9 +2517,9 @@ continuously needed.  Contributions may take many forms including cash donations, support contracts, donated developer time, and even donated tech writer time.

    -

    6.1. The USENIX OpenAFS Fund

    @@ -2529,9 +2553,9 @@ documentation, project management, and maintaining openafs.org.

    bank, made out to the USENIX OpenAFS Fund or by making a donation online.

    -

    6.2. Secure Endpoints Inc.

    @@ -2552,10 +2576,10 @@ or new features.

    the OpenAFS for Windows and the MIT Kerberos for Windows products.

    -

    6.3. Direct contributions of code and/or documentation

    @@ -2564,9 +2588,9 @@ development staffs are encouraged to contribute any code modifications they make to OpenAFS.org via openafs-bugs@openafs.org.  Contributions of documentation are highly desired.

    -

    6.4. OpenAFS for Windows Mailing Lists

    If you wish to participate in OpenAFS for Windows @@ -2585,10 +2609,10 @@ mailing list. 

    You must join the mailing lists if you wish to post to the list without incurring a moderation delay.

    -

    7. MSI Deployment Guide


     -

    7.1. Introduction

    @@ -2615,9 +2639,9 @@ is advisable to deploy registry settings    and configuration files through group policy and/or startup scripts so that machines where OpenAFS for Windows is already installed will pick up these customizations.

    -

    7.1.1 Requirements

    The information in this document applies to MSI packages @@ -2655,9 +2679,9 @@ creating a transform at:

        http://msdn.microsoft.com/library/en-us/msi/setup/a_customization_transform_example.asp

    -

    7.1.2 Authoring a Transform

    Transforms describe a set of modifications to be performed @@ -2695,18 +2719,18 @@ openafs.msi openafs-test.msi

    style='font-size:7.0pt;font-family:"Times New Roman"'>    msitran -a openafs-transform.mst openafs-test.msi

    -

    and then checking the resulting openafs-test.msi to see if all -changes you have made above to openafs-modified.msi is present in -openafs-test.msi.  'msitran' will complain if some modification in the -transform can not be successfully applied.

    +

    and then checking the resulting openafs-test.msi to see if +all changes you have made above to openafs-modified.msi is present in openafs-test.msi.  +'msitran' will complain if some modification in the transform can not be +successfully applied.

    As mentioned above, you can use a tool like ORCA.EXE to edit the MSI databases directly when editing openafs-modified.msi.  More details are given below.

    -

    7.2. Configuration Options

    @@ -2718,9 +2742,9 @@ existing registry entries (though not recommended) or adding new resources (like files or registry keys).  Instructions for performing these tasks are below.

    -

    7.2.1 Configurable Properties

    Most configurable properties correspond to registry keys or @@ -2736,9 +2760,8 @@ installer will use the property value to set the corresponding setting in the HKEY_LOCAL_MACHINE registry hive.  The HKEY_CURRENT_USER hive is not touched by the installer.

    -

    For each property, the associated registry setting is -referenced by the same text used in Appendix -A.

    +

    For each property, the associated registry setting is referenced +by the same text used in Appendix A.

    Strings are quoted using single quotes (e.g. 'a string'). An empty string is denoted as ''.  Note that you can't author null values @@ -2746,9 +2769,9 @@ into the 'Property' table.

    Numeric values should be authored as decimal strings.

    -

    7.2.1.1 Setting Properties

    In order to set a property,

    @@ -2775,19 +2798,19 @@ style='font-size:7.0pt;font-family:"Times New Roman"'>    &n If the property does not exist in the property list, right click the list and select 'Add Row', type the property name and the desired value.

    -

    7.2.1.2 OpenAFS for Windows Properties

    -
    (Service parameters):

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

    @@ -2795,10 +2818,10 @@ style='mso-bookmark:_Toc115416165'>7.2.1.2 OpenAFS for Windows Properties
    -
    (Network provider):

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]

    @@ -2806,10 +2829,10 @@ style='mso-bookmark:_Toc115416165'>7.2.1.2 OpenAFS for Windows Properties
    -
    (OpenAFS Client):

    [HKLM\SOFTWARE\OpenAFS\Client]

    @@ -2817,9 +2840,9 @@ style='mso-bookmark:_Toc115416165'>7.2.1.2 OpenAFS for Windows Properties
    -
    7.2.1.2.1 Registry Properties

    These properties are used to set the values of registry @@ -2829,9 +2852,9 @@ entries associated with OpenAFS for Windows.

    style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> -
    AFSCACHEPATH

    Registry key    : -

    AFSCACHESIZE

    Registry key    : -

    AFSCELLNAME

    Registry key    : -

    FREELANCEMODE

    Registry key    : -

    HIDEDOTFILES

    Registry key    : -

    LOGONOPTIONS

    Registry key    : -

    MOUNTROOT

    Registry key    : -

    NETBIOSNAME

    Registry key    : -

    NOFINDLANABYNAME

    Registry key    : -

    RXMAXMTU

    Registry key    : -

    SECURITYLEVEL

    Registry key    : -

    SMBAUTHTYPE

    Registry key    : -

    STOREANSIFILENAMES

    Registry key    : -

    USEDNS

    Registry key    : -

    7.2.1.2.2 AFSCreds.exe Properties
    -

    These properties are combined to add a command line option to -the shortcut that will be created in the Start:Programs:OpenAFS and +

    These properties are combined to add a command line option +to the shortcut that will be created in the Start:Programs:OpenAFS and Start:Programs:Startup folders (see CREDSSTARTUP).  The method of specifying the option was chosen for easy integration with the Windows Installer user interface.  Although other methods can be used to specify @@ -3032,23 +3055,23 @@ including such options may not apply to future releases of OpenAFS.

    style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> -
    CREDSSTARTUP

    Valid values    : '1' or '0'

    Controls whether AFSCreds.exe starts up automatically when the user logs on.  When CREDSSTARTUP is '1' a shortcut is added to the - 'Startup' folder in the 'Program menu' which starts AFSCREDS.EXE with the - options that are determined by the other CREDS* properties.

    + 'Startup' folder in the 'Program menu' which starts AFSCREDS.EXE with the options + that are determined by the other CREDS* properties.

    -
    CREDSAUTOINIT

    Valid values    : '-a' or ''

    @@ -3057,9 +3080,9 @@ including such options may not apply to future releases of OpenAFS.

    -
    CREDSIPCHDET

    Valid values    : '-n' or ''

    @@ -3068,9 +3091,9 @@ including such options may not apply to future releases of OpenAFS.

    -
    CREDSQUIET

    Valid values    : '-q' or ''

    @@ -3079,9 +3102,9 @@ including such options may not apply to future releases of OpenAFS.

    -
    CREDSRENEWDRMAP

    Valid values    : '-m' or '’

    @@ -3090,9 +3113,9 @@ including such options may not apply to future releases of OpenAFS.

    -
    CREDSSHOW

    Valid values    : '-s' or ''

    @@ -3102,9 +3125,9 @@ including such options may not apply to future releases of OpenAFS.

    -

    7.2.2 Existing Registry Entries

    You can change existing registry values subject to the @@ -3113,9 +3136,9 @@ to component key paths and try to only change the 'Value' column in the 'Registry' table.  If you want to add additional registry keys please refer to section 3 (Additional resources).

    -

    7.2.3 Replacing Configuration Files

    The OpenAFS configuration files (CellServDB) can be replaced @@ -3162,8 +3185,8 @@ font-family:"Times New Roman"'>   Enter a condition that evaluates to false. I.e. 'DONOTINSTALL'. (Note that an undefined property always evaluates to false).

    -

    Note that you can also use this step to disable other configuration -files without providing replacements.

    +

    Note that you can also use this step to disable other +configuration files without providing replacements.

    2.      @@ -3255,11 +3278,10 @@ uppercase GUID.  You can generate one using GUIDGEN.EXE or UUIDGEN.EXE, both of which are included in the Platform SDK.

    The Attributes value of 144 is a -sum of msidbComponentAttributesPermanent (16) and -msidbComponentAttributesNeverOverwrite (128).  This ensures that local -modifications are not overwritten or lost during an installation or -uninstallation.  These are the same settings used on the default -configuration files.

    +sum of msidbComponentAttributesPermanent (16) and msidbComponentAttributesNeverOverwrite +(128).  This ensures that local modifications are not overwritten or lost +during an installation or uninstallation.  These are the same settings +used on the default configuration files.

                'fil_my_CellServDB' is a key into the 'File' table which we will fill later.

    @@ -3505,8 +3527,8 @@ new row with the following values:

    The 'Attributes' value is msidbFileAttributesNonCompressed (8192).  This is because we will be placing this file in the same directory as the MSI instead of embedding the -file in it.  Transforms do not support updating compressed sources or -adding new cabinet streams.

    +file in it.  Transforms do not support updating compressed sources or adding +new cabinet streams.

    Finally, the 'Sequence' value of 1000 will be used later to distinguish the file as being in a separate source @@ -3555,17 +3577,17 @@ row with the following values :

    The sequence number of 1000 designates this as the media source for the newly added file.

    -

    7.2.3.1 Components for Configuration Files

    CellServDB: 'cpf_CellServDB' (ID {D5BA4C15-DBEC-4292-91FC-B54C30F24F2A})

    -

    7.2.4 Adding Domain Specific Registry Keys

    Following is an example for adding domain specific registry @@ -3575,8 +3597,8 @@ keys.

    href="#_Appendix_A:_Registry_Values">Appendix A section 2.1 for more information.

    -

        Columns that are unspecified should be left -empty.

    +

        Columns that are unspecified should be +left empty.

        We create a new feature and component to hold the new registry keys.

    @@ -3593,8 +3615,7 @@ hold the new registry keys.

                (new row)
                - Feature            : - 'feaDomainKeys'
    + Feature            : 'feaDomainKeys'
                Feature Parent : 'feaClient'
                @@ -3619,8 +3640,8 @@ hold the new registry keys.

    Component     : 'rcm_DomainKeys'
                ComponentId  : '{4E3FCBF4-8BE7-40B2-A108-C47CF743C627}'
    -             Directory         - : 'TARGETDIR'
    +             + Directory         : 'TARGETDIR'
                Attributes        : 4
                @@ -3660,7 +3681,8 @@ hold the new registry keys.

    : 2
                Key                 - : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'
    + : + 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'
                Component     : 'rcm_DomainKeys'

    @@ -3677,7 +3699,8 @@ hold the new registry keys.

    : 2
                Key                 - : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'
    + : + 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'
                Name              : '*'
    @@ -3697,7 +3720,8 @@ hold the new registry keys.

    : 2
                Key                 - : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'
    + : + 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'
                Name              : '*'
    @@ -3741,8 +3765,7 @@ hold the new registry keys.

    : 2
                Key                 - : - SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'
    + : SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'
                Name              : '*'
    @@ -3762,7 +3785,8 @@ hold the new registry keys.

    : 2
                Key                 - : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'
    + : + 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'
                Name              : 'LogonOptions'
    @@ -3805,9 +3829,9 @@ hold the new registry keys.

    (enable integrated logon) and 'LOCALHOST' (disable integrated logon and fail logins silently).

    -

    7.2.5 Adding Site Specific Freelance Registry Keys

    @@ -3925,8 +3949,8 @@ hold the new registry keys.

                Value              : 'athena.mit.edu#athena.mit.edu:root.cell.'
    -             Component     - : 'rcm_FreelanceKeys'

    +             + Component     : 'rcm_FreelanceKeys'

    @@ -3945,7 +3969,8 @@ hold the new registry keys.

                Name              : '1'
    -             Value           +             + Value              : '.athena.mit.edu%athena.mit.edu:root.cell.'
                Component     : 'rcm_FreelanceKeys'

    @@ -3995,8 +4020,8 @@ hold the new registry keys.

                (new row)
    -             - Registry          : 'reg_freekey5'
    +             Registry          + : 'reg_freekey5'
                Root                : 2
    @@ -4009,8 +4034,8 @@ hold the new registry keys.

                Value              : '.athena:.athena.mit.edu.'
    -             - Component     : 'rcm_FreelanceKeys'

    +             Component     + : 'rcm_FreelanceKeys'

    @@ -4019,10 +4044,10 @@ hold the new registry keys.

    athena.mit.edu cell's root.afs volume as well as a read-write mountpoint.  Aliases are also provided using symlinks.

    -

    7.3 Additional Resources

    If you want to add registry keys or files you need to create @@ -4065,9 +4090,9 @@ openafs-en_US_new.msi openafs-transform.mst

    See the Platform SDK documentation for information on command line options for MSITRAN.EXE.

    -

    7.4. Upgrades

    @@ -4110,24 +4135,24 @@ described in the Platform SDK.

    When performing an upgrade with msiexec.exe execute the MSI with the repair options "vomus".

    -

    Appendix A: Registry Values

    -

    A.1. Service parameters

    The service parameters primarily affect the behavior of the AFS client service (afsd_service.exe).

    -

    Regkey:
    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

    @@ -4136,9 +4161,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: LANadapter
    @@ -4157,10 +4182,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: CacheSize

    Type: DWORD
    @@ -4172,9 +4197,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: ChunkSize
    @@ -4188,9 +4213,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: Daemons

    Type: DWORD
    @@ -4203,9 +4228,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: ServerThreads
    @@ -4219,9 +4244,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: Stats
    @@ -4234,10 +4259,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: LogoffPreserveTokens

    Type: DWORD {1,0}
    @@ -4250,9 +4275,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: RootVolume
    @@ -4265,10 +4290,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: MountRoot

    Type: REG_SZ
    @@ -4287,10 +4312,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: CachePath

    Type: REG_SZ or REG_EXPAND_SZ
    @@ -4304,9 +4329,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: NonPersistentCaching
    @@ -4323,9 +4348,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: ValidateCache
    @@ -4342,9 +4367,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: TrapOnPanic
    @@ -4358,10 +4383,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: NetbiosName

    Type: REG_EXPAND_SZ
    @@ -4375,9 +4400,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: IsGateway
    @@ -4397,9 +4422,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: ReportSessionStartups
    @@ -4414,10 +4439,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: TraceBufferSize

    Type: DWORD
    @@ -4429,10 +4454,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: SysName

    Type: REG_SZ
    @@ -4447,10 +4472,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: SecurityLevel

    Type: DWORD {1,0}
    @@ -4462,9 +4487,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: UseDNS

    Type: DWORD {1,0}
    @@ -4479,10 +4504,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: FreelanceClient

    Type: DWORD {1,0}
    @@ -4494,10 +4519,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: HideDotFiles

    Type: DWORD {1,0}
    @@ -4511,9 +4536,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: MaxMpxRequests
    @@ -4527,9 +4552,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: MaxVCPerServer
    @@ -4542,9 +4567,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: Cell

    Type: REG_SZ
    @@ -4557,26 +4582,26 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: RxNoJumbo

    Type: DWORD {0,1}
    Default: 0
    Variable: rx_nojumbo

    -

    If enabled, does not send or indicate that we are able to - send or receive RX jumbograms.

    +

    If enabled, does not send or indicate that we are able + to send or receive RX jumbograms.

    -
    Value: RxMaxMTU

    Type: DWORD
    @@ -4591,10 +4616,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: ConnDeadTimeout

    Type: DWORD
    @@ -4612,9 +4637,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: HardDeadTimeout
    @@ -4628,10 +4653,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: TraceOption

    Type: DWORD {0-15}
    @@ -4651,9 +4676,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: AllSubmount
    @@ -4668,24 +4693,24 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: NoFindLanaByName

    Type: DWORD {0, 1}
    Default: 0

    -

    Disables the attempt to identity the network adapter to - use by looking for an adapter with a display name of "AFS".

    +

    Disables the attempt to identity the network adapter to use + by looking for an adapter with a display name of "AFS".

    -
    Value: MaxCPUs

    Type: DWORD {1..32} or {1..64} depending on the @@ -4699,10 +4724,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: smbAuthType

    Type: DWORD {0..2}
    @@ -4719,10 +4744,10 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: MaxLogSize

    Type: DWORD {0 .. MAXDWORD}
    @@ -4736,9 +4761,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: FlushOnHibernate
    @@ -4751,8 +4776,8 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -
    Value: +
    Value: daemonCheckDownInterval

    Type: DWORD (seconds)
    @@ -4765,8 +4790,8 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: +
    Value: daemonCheckUpInterval

    Type: DWORD (seconds)
    @@ -4778,8 +4803,8 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: +
    Value: daemonCheckVolInterval

    Type: DWORD (seconds)
    @@ -4792,8 +4817,8 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: +
    Value: daemonCheckCBInterval

    Type: DWORD (seconds)
    @@ -4806,8 +4831,8 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: +
    Value: daemonCheckLockInterval

    Type: DWORD (seconds)
    @@ -4820,8 +4845,8 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: +
    Value: daemonTokenCheckInterval

    Type: DWORD (seconds)
    @@ -4834,23 +4859,24 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Value: +
    Value: CallBackPort

    Type: DWORD
    Default: 7001

    This value specifies which port number should be used for receiving callbacks from the file server.  The standard AFS Callback port is 7001.  Alternative values can be useful if the client - is behind a NAT and a permanent port mapping for the client is being configured.

    + style='mso-spacerun:yes'>  Alternative values can be useful if the + client is behind a NAT and a permanent port mapping for the client is being + configured.

    -
    Value: EnableServerLocks
    @@ -4868,9 +4894,9 @@ style='mso-bookmark:_Toc115416200'>Regkey:
    -

    Regkey:
    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters\GlobalAutoMapper]

    @@ -4880,24 +4906,24 @@ style='mso-bookmark:_Toc115416237'>Regkey:
    height:65.0pt'> -
    Value: <Drive Letter:> for example "G:"

    Type: REG_SZ

    -

    Specifies the submount name to be mapped by afsd_service.exe - at startup to the provided drive letter.

    +

    Specifies the submount name to be mapped by + afsd_service.exe at startup to the provided drive letter.

    This option is deprecated.

    -

    Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client]

    @@ -4906,10 +4932,10 @@ style='mso-bookmark:_Toc115416239'>Regkey:
    -
    Value: CellServDBDir

    Type: REG_SZ
    @@ -4922,32 +4948,33 @@ style='mso-bookmark:_Toc115416239'>Regkey:
    -

    Value: VerifyServiceSignature

    Type: REG_DWORD
    Default: 0x1

    This value can be used to disable the runtime - verification of the digital signatures applied to afsd_service.exe and the OpenAFS - DLLs it loads.  This test is performed to verify that   the - DLLs which are loaded by afsd_service.exe are from the same distribution as - afsd_service.exe.  This is to prevent random errors caused when DLLs - from one distribution of AFS are loaded by another one.  This is not a - security test.  The reason for disabling this test is to free up - additional memory which can be used for a large cache size.

    + verification of the digital signatures applied to afsd_service.exe and the + OpenAFS DLLs it loads.  This test is performed to verify + that   the DLLs which are loaded by afsd_service.exe are from the + same distribution as afsd_service.exe.  This is to prevent random errors + caused when DLLs from one distribution of AFS are loaded by another + one.  This is not a security test.  The reason for disabling this + test is to free up additional memory which can be used for a large cache + size.

    -
    Value: IoctlDebug

    Type: REG_DWORD
    @@ -4962,9 +4989,9 @@ style='mso-bookmark:_Toc115416239'>Regkey:
    -

    Value: MiniDumpType
    @@ -4997,10 +5024,10 @@ style='mso-bookmark:_Toc115416239'>Regkey:
    -
    Value: StoreAnsiFilenames

    Type: REG_DWORD
    @@ -5017,9 +5044,9 @@ style='mso-bookmark:_Toc115416239'>Regkey:
    -

    Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client\CSCPolicy]

    @@ -5029,26 +5056,26 @@ style='mso-bookmark:_Toc115416245'>Regkey:
    height:112.0pt'> -
    Value: "smb/cifs share name"

    Type: REG_SZ
    Default: <none>

    This key is used to map SMB/CIFS shares to Client Side - Caching (off-line access) policies. For each share one of the following policies - may be used: "manual", "programs", "documents", - "disable". 

    + Caching (off-line access) policies. For each share one of the following + policies may be used: "manual", "programs", + "documents", "disable". 

    These values used to be stored in afsdsbmt.ini

    -

    Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client\Freelance]

    @@ -5058,9 +5085,9 @@ style='mso-bookmark:_Toc152605197'>Regkey:
    height:138.5pt'> -
    Value: "numeric value"
    @@ -5076,10 +5103,10 @@ style='mso-bookmark:_Toc152605197'>Regkey:
    -

    Regkey:
    +_Toc154229520'>Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client\Freelance\Symlinks]

    Regkey:
    height:145.0pt'>
    -
    Value: "numeric value"

    Type: REG_SZ
    Default: <none>

    -

    This key is used to store a dot terminated symlink strings - for use in constructing the fake root.afs volume when Freelance (dynamic - roots) mode is activated.

    +

    This key is used to store a dot terminated symlink + strings for use in constructing the fake root.afs volume when Freelance + (dynamic roots) mode is activated.

    "linkname:destination-path."

    "athena:athena.mit.edu."

    "home:athena.mit.edu\user\j\a\jaltman."

    @@ -5107,9 +5134,9 @@ _Toc152606370'>Regkey:
    -

    Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client\Submounts]

    @@ -5119,9 +5146,9 @@ style='mso-bookmark:_Toc115416251'>Regkey:
    height:171.75pt'> -
    Value: "submount name"
    @@ -5140,10 +5167,10 @@ style='mso-bookmark:_Toc115416251'>Regkey:
    -

    Regkey:
    +_Toc154229524'>Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\VLDB]

    Regkey:
    height:105.5pt'>
    -
    Value: "hostname or ip address"
    @@ -5169,9 +5196,9 @@ _Toc152606374'>Regkey:
    -

    Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\File]

    @@ -5181,9 +5208,9 @@ style='mso-bookmark:_Toc115416255'>Regkey:
    height:105.5pt'> -
    Value: "hostname or ip address"
    @@ -5191,24 +5218,24 @@ style='mso-bookmark:_Toc115416255'>Regkey:
    Default: <none>

    This key is used to specify a default set of File server preferences. For each entry the value name will be either the IP address of a - server or a fully qualified domain name.  The value will be the - ranking.  The ranking will be adjusted by a random value between 0 and - 256 prior to the preference being set.

    + server or a fully qualified domain name.  The value will be the ranking.  + The ranking will be adjusted by a random value between 0 and 256 prior to the + preference being set.

    -

    A.2. Integrated Logon Network provider parameters

    Affects the network provider (afslogon.dll).

    -

    Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

    @@ -5218,9 +5245,9 @@ style='mso-bookmark:_Toc115416258'>Regkey: height:65.75pt'> -
    Value: FailLoginsSilently
    @@ -5231,9 +5258,9 @@ style='mso-bookmark:_Toc115416258'>Regkey: -

    Regkey:
    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]

    @@ -5242,9 +5269,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -
    Value: NoWarnings
    @@ -5256,9 +5283,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -
    Value: AuthentProviderPath
    @@ -5271,9 +5298,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -
    Value: Class

    Type: DWORD
    @@ -5284,9 +5311,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -

    Value: DependOnGroup
    @@ -5301,9 +5328,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -
    Value: DependOnService
    @@ -5317,9 +5344,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -
    Value: Name

    Type: REG_SZ
    @@ -5330,9 +5357,9 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -

    Value: ProviderPath
    @@ -5343,10 +5370,10 @@ style='mso-bookmark:_Toc115416260'>Regkey:
    -

    A.2.1 +style='mso-bookmark:_Toc154229539'>A.2.1 Domain specific configuration keys for the Network Provider

    The network provider can be configured to have different @@ -5359,38 +5386,38 @@ function of the network provider.

    Domain specific registry keys are:

    -

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]

      (NP key)

    -

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain]

      (Domains key)

    -

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\"domain name"]

      (Specific domain key. One per domain.)

    -

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]

      (Localhost key)

    -

    Example:

     HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider

    @@ -5409,14 +5436,14 @@ style='mso-bookmark:_Toc115416273'>Example: values described in 2.1.1.  The effective values are chosen as described in 2.1.2.

    -

    A.2.1.1 Domain specific configuration values

    -

    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]
    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain]
    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\"domain @@ -5428,10 +5455,10 @@ name"]
    -
    Value: LogonOptions

    Type: DWORD
    @@ -5444,17 +5471,17 @@ name"]

    High Security Mode generates random SMB names for the creation of Drive Mappings.  This mode should not be used without Integrated Logon.

    -

    As of 1.3.65 the SMB server supports SMB - authentication.  The High Security Mode should not be used when using - SMB authentication (SMBAuthType setting is non zero).

    +

    As of 1.3.65 the SMB server supports SMB authentication.  + The High Security Mode should not be used when using SMB authentication + (SMBAuthType setting is non zero).

    -
    Value: FailLoginsSilentl
    @@ -5468,9 +5495,9 @@ name"]
    -
    Value: LogonScript
    @@ -5489,9 +5516,9 @@ name"]
    -
    Value: LoginRetryInterval
    @@ -5507,9 +5534,9 @@ name"]
    -
    Value: LoginSleepInterval
    @@ -5522,10 +5549,10 @@ name"]
    -
    Value: TheseCells

    Type: REG_MULTI_SZ
    @@ -5537,9 +5564,9 @@ name"]
    -

    A.2.1.2 Selection of effective values for domain specific configuration

    @@ -5550,8 +5577,7 @@ computer, the following keys will be looked up.

    1.      -NP key. -("HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider")

    +    NP key. ("HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider")

    2.      @@ -5573,17 +5599,17 @@ session.  If no such instance can be found, the default will be used.  To re-iterate, a value in a more specific key supercedes a value in a less specific key.  The exceptions to this rule are stated below.

    -

    A.2.1.3 Exceptions to A.2.1.2

    To retain backwards compatibility, the following exceptions are made to 2.1.2.

    -

    2.1.3.1 'FailLoginsSilently'

    Historically, the 'FailLoginsSilently' value was in @@ -5592,9 +5618,9 @@ in the NP key.  Therefore, for backwards compatibility, the value in the Parameters key will supercede all instances of this value in other keys.  In the absence of this value in the Parameters key, normal scope rules apply.

    -

    2.1.3.2 'LogonScript'

    If a 'LogonScript' is not specified in the specific domain @@ -5604,17 +5630,17 @@ logon script is specified in the specific domain key or the domains key, it will be used regardless of the high security setting.  Please be aware of this when setting this value.

    -

    A.3. AFS Credentials System Tray Tool parameters

    Affects the behavior of afscreds.exe

    -

    Regkey:
    [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

    @@ -5623,9 +5649,9 @@ style='mso-bookmark:_Toc115416287'>Regkey:
    -
    Value: Gateway

    Type: REG_SZ
    @@ -5638,9 +5664,9 @@ style='mso-bookmark:_Toc115416287'>Regkey:
    -

    Value: Cell

    Type: REG_SZ
    @@ -5652,9 +5678,9 @@ style='mso-bookmark:_Toc115416287'>Regkey:
    -

    Regkey:
    [HKLM\SOFTWARE\OpenAFS\Client]
    [HKCU\SOFTWARE\OpenAFS\Client]

    @@ -5664,9 +5690,9 @@ style='mso-bookmark:_Toc115416290'>Regkey:
    -
    Value: ShowTrayIcon
    @@ -5685,10 +5711,10 @@ style='mso-bookmark:_Toc115416290'>Regkey:
    -
    Value: EnableKFW
    @@ -5705,10 +5731,10 @@ style='mso-bookmark:_Toc115416290'>Regkey:
    -
    Value: Use524

    Type: DWORD {0, 1}
    @@ -5724,10 +5750,10 @@ style='mso-bookmark:_Toc115416290'>Regkey:
    -

    Value: AfscredsShortcutParams
    @@ -5754,9 +5780,9 @@ style='mso-bookmark:_Toc115416290'>Regkey:
    -

    Regkey:
    [HKCU\SOFTWARE\OpenAFS\Client]

    @@ -5766,9 +5792,9 @@ style='mso-bookmark:_Toc115416295'>Regkey:
    height:92.0pt'> -
    Value: Authentication Cell
    @@ -5781,9 +5807,9 @@ style='mso-bookmark:_Toc115416295'>Regkey:
    -

    Regkey:
    [HKCU\SOFTWARE\OpenAFS\Client\Reminders]

    @@ -5793,9 +5819,9 @@ style='mso-bookmark:_Toc115416297'>Regkey:
    height:124.75pt'> -
    Value: "afs cell name"
    @@ -5810,9 +5836,9 @@ style='mso-bookmark:_Toc115416297'>Regkey:
    -

    Regkey:
    [HKCU\SOFTWARE\OpenAFS\Client\Active Maps]

    @@ -5822,9 +5848,9 @@ style='mso-bookmark:_Toc115416299'>Regkey:
    height:98.5pt'> -
    Value: "upper case drive letter"
    @@ -5837,9 +5863,9 @@ style='mso-bookmark:_Toc115416299'>Regkey:
    -

    Regkey:
    [HKCU\SOFTWARE\OpenAFS\Client\Mappings]

    @@ -5849,24 +5875,24 @@ style='mso-bookmark:_Toc115416301'>Regkey:
    height:98.5pt'> -
    Value: "upper case drive letter"

    Type: REG_SZ
    Default: <none>

    -

    These values are used to store the AFS path in UNIX notation - to which the drive letter is to be mapped.

    +

    These values are used to store the AFS path in UNIX + notation to which the drive letter is to be mapped.

    These values used to be stored in the afsdsbmt.ini file.

    -

    A.4 OpenAFS Client Service Environment Variables

    @@ -5874,22 +5900,22 @@ OpenAFS Client Service Environment Variables

    style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> -
    Variable: AFS_RPC_ENCRYPT
    -

    Values:   "OFF" disables the use of RPC - encryption any other value allows RPC encryption to be used
    +

    Values:   "OFF" disables the use of + RPC encryption any other value allows RPC encryption to be used
    Default:  RPC encryption is on

    -
    Variable: AFS_RPC_PROTSEQ
    diff --git a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/toc.htm b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/toc.htm index 40126d2e6..cdf741891 100644 --- a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/toc.htm +++ b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/toc.htm @@ -20,12 +20,12 @@ xmlns="http://www.w3.org/TR/REC-html40"> 2006-11-30T04:12:00Z 2006-11-30T04:14:00Z 1 - 6360 - 36257 + 6422 + 36609 Secure Endpoints Inc. - 302 + 305 85 - 42532 + 42946 11.8107