[OpenAFS] Serving AFS to Windows boxes w/o OpenAFS client (Samba)?

[Christof Hanke]

There is some stuff about this in the Wiki :

http://wiki.openafs.org/AFSLore/SMBtoAFS/

but a lot of stuff is outdated (dead links etc.)

The apparently preferred method is with kimpersonate, which I
don't like that much.
I hope it is possible to create a ticket file using pam and then
use "aklog -setpag" in smb.conf (preexec).
We will also use this for Windows7 clients until 1.8 is out.
However I'm on holiday soon, so I'll get to it in February earliest.

HTH,

Christof

Am 14.12.2010 01:12, schrieb Jeff Blaine:
> This Windows 7 thing has us looking for alternate temporary
> solutions, as 7 is the only OS being pushed to new corporate
> PCs and our OpenAFS from Windows usage is niche enough to
> not warrant concern from corporate IT. So, every few weeks
> we get another user opening a support ticket with us about
> their new PC and non-functioning OpenAFS.
>
> What is the correct (or at least functioning) way to get
> OpenAFS access from Windows using Samba?
>
> We do not care about tying to any AD servers, etc. It's
> purely a UNIX/Linux shop from our end.
>
> I see Samba has:
>
> --with-afs
> Include AFS clear-text auth support (default=no)
>
> --with-fake-kaserver
> Include AFS fake-kaserver support (default=no)
>
> We don't currently run a fake-kaserver, as we have no need.
>
> It's safe to say that any sort of clear-text auth via
> whatever --with-afs does is unacceptable to us.
>
> Any guidance would be most appreciated, and I'd be happy
> to write up what works if I get to that point, assuming
> there is nothing written up yet.
>
> Jeff
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info