[OpenAFS] Roaming Profiles on AFS

[Christos Triantafyllidis]

This is a cryptographically signed message in MIME format.

--------------ms040803070700050105060300
Content-Type: text/plain; charset=ISO-8859-7; format=flowed
Content-Transfer-Encoding: 7bit

Greetings list,

I have a problem storing windows roaming profiles on AFS. i have heimdal 
kerberos 5 as authentication server, windows 2000 server as 
authorization server for windows and windows XP as workstations.

I have installed openafs 1.3.77 on workstations, mit kerberos 2.6.5 for 
windows.

The problem i have is that although i can login normally on computer (it 
downloads the profile from afs) i can't logoff normally. i get an ACCESS 
DENIED message (about uploading profile on AFS).

At server i have as profile path "\\afs\all\cell\path\to\profile"
this path exists and it is empty. i also tried making a drive at windows 
startup (using "net use") and using as profile path 
"n:\cell\path\to\profile" but i get the same error.

I found out (by playing with afslogon.dll, thanks Rodney M Dyer) that 
the at logoff the function IsPathInAfs about my profile path returns 
FALSE. i thought that this may be the problem so i changed the code of 
this function to always return TRUE. Still no success.

I'm looking forward an answer,

Christos Triantafyllidis,
Aristotles University of Thessaloniki, Greece
Department Of Physics

PS: /afs/cell/path/to/profile has acl record (full access) only for me 
(user who owns the profile)
PS2: /afs/cell/path has acl record "list" only for authenticated users

--------------ms040803070700050105060300
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIII2jCC
BGkwggNRoAMCAQICAXkwDQYJKoZIhvcNAQEFBQAwOjELMAkGA1UEBhMCR1IxEzARBgNVBAoT
CkhlbGxhc0dyaWQxFjAUBgNVBAMTDUhlbGxhc0dyaWQgQ0EwHhcNMDQxMjE0MTY1MTQ5WhcN
MDUxMjE0MTY1MTQ5WjBgMQswCQYDVQQGEwJHUjETMBEGA1UEChMKSGVsbGFzR3JpZDEYMBYG
A1UECxMPcGh5c2ljcy5hdXRoLmdyMSIwIAYDVQQDExlUcmlhbnRpYWZpbGxpZGlzIENocmlz
dG9zMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDxroacvgqMWnnCvlPswU5pcgjFKAX
p3JURCiaVTM/vTV2w+Cdcn/UYIG3laQmOJ36i3zTdTqh8sIY+WFUb9aHtO4mMhJX6h+lBhFQ
ZQdg0WwM/gxd2wmJpw/oE7PzqdOK8Ft/MNet05y8yviBDnJ4BWTVDcMGXuVKhu8Z8DMhLQID
AQABo4IB1jCCAdIwDAYDVR0TAQH/BAIwADARBglghkgBhvhCAQEEBAMCBaAwDgYDVR0PAQH/
BAQDAgTwMB0GA1UdDgQWBBRDHhIEDJD1vlcAsxawfR8SWItBMTBiBgNVHSMEWzBZgBQ2JrZf
N/CM+XHHrtwWXOVkKCEc7qE+pDwwOjELMAkGA1UEBhMCR1IxEzARBgNVBAoTCkhlbGxhc0dy
aWQxFjAUBgNVBAMTDUhlbGxhc0dyaWQgQ0GCAQAwTwYDVR0fBEgwRjBEoEKgQIY+aHR0cDov
L3BraS5waHlzaWNzLmF1dGguZ3IvaGVsbGFzZ3JpZC1jYS9DUkwvaGVsbGFzZ3JpZC12Mi5j
cmwwVQYDVR0gBE4wTDBKBgwrBgEEAeYhAgEKAQQwOjA4BggrBgEFBQcCARYsaHR0cDovL3Br
aS5waHlzaWNzLmF1dGguZ3IvaGVsbGFzZ3JpZC1jYS9DUFMwUgYDVR0SBEswSYEdaGVsbGFz
Z3JpZC1jYUBwaHlzaWNzLmF1dGguZ3KGKGh0dHA6Ly9wa2kucGh5c2ljcy5hdXRoLmdyL2hl
bGxhc2dyaWQtY2EwIAYDVR0RBBkwF4EVY3RyaWFAcGh5c2ljcy5hdXRoLmdyMA0GCSqGSIb3
DQEBBQUAA4IBAQC/ZHbm6520sK08NXHPCZ35uv7MQfwfBCal8SyHZ2oaG8HTOidL6hdnB076
bYDYzJBvLWPDGNkHPb4XcPuWUpK9sSt+GakFSZJ+g09bGPLqhwGvFAPCQ8+gEjecy4IL2Ldf
tSV32F2OGXPAMYy9IPrZfK7jH6vtehMG3ssCMJKBvbLufb69Cy8V9vjzfKyw6zCccW5tkvtO
tAgk0Qc68VoANX0Xt0vVYbznkuO2mBo9McsW4yT3pHwrTQx1y7CviJ5oVcJXiGuPIGSlWHgK
/sbnHaNL2P0SURdZ19UD1ytHX7SOZwCfhY7TftlyqIrjk5+sOpRfjS5gbiU0ESg18YARMIIE
aTCCA1GgAwIBAgIBeTANBgkqhkiG9w0BAQUFADA6MQswCQYDVQQGEwJHUjETMBEGA1UEChMK
SGVsbGFzR3JpZDEWMBQGA1UEAxMNSGVsbGFzR3JpZCBDQTAeFw0wNDEyMTQxNjUxNDlaFw0w
NTEyMTQxNjUxNDlaMGAxCzAJBgNVBAYTAkdSMRMwEQYDVQQKEwpIZWxsYXNHcmlkMRgwFgYD
VQQLEw9waHlzaWNzLmF1dGguZ3IxIjAgBgNVBAMTGVRyaWFudGlhZmlsbGlkaXMgQ2hyaXN0
b3MwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMPGuhpy+CoxaecK+U+zBTmlyCMUoBen
clREKJpVMz+9NXbD4J1yf9RggbeVpCY4nfqLfNN1OqHywhj5YVRv1oe07iYyElfqH6UGEVBl
B2DRbAz+DF3bCYmnD+gTs/Op04rwW38w163TnLzK+IEOcngFZNUNwwZe5UqG7xnwMyEtAgMB
AAGjggHWMIIB0jAMBgNVHRMBAf8EAjAAMBEGCWCGSAGG+EIBAQQEAwIFoDAOBgNVHQ8BAf8E
BAMCBPAwHQYDVR0OBBYEFEMeEgQMkPW+VwCzFrB9HxJYi0ExMGIGA1UdIwRbMFmAFDYmtl83
8Iz5cceu3BZc5WQoIRzuoT6kPDA6MQswCQYDVQQGEwJHUjETMBEGA1UEChMKSGVsbGFzR3Jp
ZDEWMBQGA1UEAxMNSGVsbGFzR3JpZCBDQYIBADBPBgNVHR8ESDBGMESgQqBAhj5odHRwOi8v
cGtpLnBoeXNpY3MuYXV0aC5nci9oZWxsYXNncmlkLWNhL0NSTC9oZWxsYXNncmlkLXYyLmNy
bDBVBgNVHSAETjBMMEoGDCsGAQQB5iECAQoBBDA6MDgGCCsGAQUFBwIBFixodHRwOi8vcGtp
LnBoeXNpY3MuYXV0aC5nci9oZWxsYXNncmlkLWNhL0NQUzBSBgNVHRIESzBJgR1oZWxsYXNn
cmlkLWNhQHBoeXNpY3MuYXV0aC5ncoYoaHR0cDovL3BraS5waHlzaWNzLmF1dGguZ3IvaGVs
bGFzZ3JpZC1jYTAgBgNVHREEGTAXgRVjdHJpYUBwaHlzaWNzLmF1dGguZ3IwDQYJKoZIhvcN
AQEFBQADggEBAL9kdubrnbSwrTw1cc8Jnfm6/sxB/B8EJqXxLIdnahobwdM6J0vqF2cHTvpt
gNjMkG8tY8MY2Qc9vhdw+5ZSkr2xK34ZqQVJkn6DT1sY8uqHAa8UA8JDz6ASN5zLggvYt1+1
JXfYXY4Zc8AxjL0g+tl8ruMfq+16EwbeywIwkoG9su59vr0LLxX2+PN8rLDrMJxxbm2S+060
CCTRBzrxWgA1fRe3S9VhvOeS47aYGj0xyxbjJPekfCtNDHXLsK+InmhVwleIa48gZKVYeAr+
xucdo0vY/RJRF1nX1QPXK0dftI5nAJ+FjtN+2XKoiuOTn6w6lF+NLmBuJTQRKDXxgBExggI8
MIICOAIBATA/MDoxCzAJBgNVBAYTAkdSMRMwEQYDVQQKEwpIZWxsYXNHcmlkMRYwFAYDVQQD
Ew1IZWxsYXNHcmlkIENBAgF5MAkGBSsOAwIaBQCgggFTMBgGCSqGSIb3DQEJAzELBgkqhkiG
9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA1MDEwNjEzNDgwMFowIwYJKoZIhvcNAQkEMRYEFIxY
oT0hppvyeMwBgp2CMy7NiGzzME4GCSsGAQQBgjcQBDFBMD8wOjELMAkGA1UEBhMCR1IxEzAR
BgNVBAoTCkhlbGxhc0dyaWQxFjAUBgNVBAMTDUhlbGxhc0dyaWQgQ0ECAXkwUAYLKoZIhvcN
AQkQAgsxQaA/MDoxCzAJBgNVBAYTAkdSMRMwEQYDVQQKEwpIZWxsYXNHcmlkMRYwFAYDVQQD
Ew1IZWxsYXNHcmlkIENBAgF5MFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZI
hvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMA0GCSqG
SIb3DQEBAQUABIGAHRtoEjuu+nOSqmGkkC96HGQ/GHi+CHCv2TffzSC/PYppdreWRA6kx9bc
ABUwmQwNA6vNY40EQtQPiSvqqUmqiK03S3uoIKNzfXDTeOZRvK0CwdSnuZ+05ZwgT9OrNE8V
mlqqm5etLC6/TxOnAweCGytoWQHgLTLzhApsrhC72ooAAAAAAAA=
--------------ms040803070700050105060300--