[OpenAFS] OpenAFS + Windows 7 (x64)

[Jason D. McCormick]

We're trying to deploy new workstations based on Windows 7 using OpenAFS
(1.5.73) and Kerberos for Windows.  I was curious how/if people are getting=
 a
working configuration for this setup.   We're encountering two major proble=
ms
that I was hoping someone on the list had already encountered and could hel=
p
out with.

#1 - \\AFS UNC name doesn't function when making network transitions, notab=
ly
when using the Cisco VPN client but it also appears to die at other random
unrepeatable intervals (although this is during testing work).  It appears
that while on certain network configurations (e.g. wired physically to the
network) the \\AFS appears to work and is bound to the AFS loopback adapter
(10.254.254.254).  However unplugging the network and/or opening the VPN
appear to cause some sort of network state transition that kills off the
mappings.  I found a reference to a similar problem
(<http://mailman.mit.edu/pipermail/kerberos/2009-October/015364.html>) wher=
e
Jeff said the bug is in Windows.  Does anyone know if there's a workaround =
or
hotfix since then?

#2 - The Windows team is using folder redirection within profiles, but only
selectively (e.g. Documents, Desktop, AppData).  However something within t=
he
synchronization service seems to think that \\AFS should somehow be availab=
le
offline.  We keep seeing explorer.exe routinely consume 50% or more of the =
CPU
and it appears to be continuously trying to open
C:\Windows\CSC\v2.0.6\namespace\afs even though we don't have the filesyste=
m
marked as being available offline.  Am I correct in understanding from the
thread above
(<http://mailman.mit.edu/pipermail/kerberos/2009-October/015364.html>)
that this is also part of the SMB bug?

If there's an implementation guide for Win7 I'm missing, please point
it out.  Thanks.

--
Jason McCormick
Unix Team Lead, Systems Group, IT
Software Engineering Institute, Carnegie Mellon Univ.
E: jasonmc@sei.cmu.edu