[OpenAFS] OpenAFS + Linux +XP

Rodney M Dyer rmdyer@uncc.edu
Thu, 22 Jan 2004 12:14:24 -0500


At 11:30 AM 1/22/2004, Eggert, Richard W, II (Rich), GVSOL wrote:

>I find the integrated login to be very unstable (it causes blue screen
>of death and random reboots sometimes), so I don't use it.  Then again,
>I'm the only person using my cell (with multiple accounts), so I can do
>things however I want to.

Well I know this isn't right.  We've got well over 500 XP-SP1 machines of 
all various flavors of processor and ram/disk sizes from Dell and 
Gateway.  I've never once got a blue screen because of integrated 
logon.  We've been running both Transarc (years) and OpenAFS (during the 
last year) without integrated logon problems.  You must be having other 
problems with your systems.

The best way to handle multiple accounts on XP workstations is to go ahead 
and do things right the first time by creating a proper MS AD domain.  You 
will save yourself lots of grief this way.  Then, just create a script on 
the AD server that syncronizes AD accounts with your unix password 
file.  Note that our AD accounts have random passwords that the user's 
don't know.  The AD is setup to trust the MIT K5 kdc credentials using 
cross realm authentication.

See my website for more information...

http://www.coe.uncc.edu/~rmdyer
http://www.coe.uncc.edu/~rmdyer/krblogon.htm

Rodney

Rodney M. Dyer
Windows Systems Programmer
Mosaic Computing Group
William States Lee College of Engineering
University of North Carolina at Charlotte
Email: rmdyer@uncc.edu
Web: http://www.coe.uncc.edu/~rmdyer
Phone (704)687-3518
Help Desk Line (704)687-3150
FAX (704)687-2352
Office  267 Smith Building