[OpenAFS] Windows registry for multiple cells

Hugo Monteiro hugo.monteiro@fct.unl.pt
Tue, 29 Mar 2011 19:20:44 +0100


Hello list,

I'm trying to set a windows 7 64 bit client machine to be able to access 
two separate cells, while using integrated logon.

 From the docs i found out there is a registry parameter called 
TheseCells, that can be added to 
[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain] 
, and child domain keys, so that one can specify a "list of additional 
cells for which tokens should be obtained with the default Kerberos v5 
principal".

Happens that apparently the afs client is disregarding this parameter 
since it gets no tokens for the second cell. Everything else is working 
since i can easily issue aklog -cell secondcell in the command line and 
at that moment i'm able to access the volumes on the second cell.

In the kdc logs i also notice that there are only requests for the 
default cell and not for the second one as it should happen.

Can someone please clarify if i missed something or is this an issue of 
the client/build?

Best Regards,

Hugo Monteiro.

-- 
fct.unl.pt:~# cat .signature

Hugo Monteiro
Email	 : hugo.monteiro@fct.unl.pt
Telefone : +351 212948300 Ext.15307
Web      : http://hmonteiro.net

Divisão de Informática
Faculdade de Ciências e Tecnologia da
		   Universidade Nova de Lisboa
Quinta da Torre   2829-516 Caparica   Portugal
Telefone: +351 212948596   Fax: +351 212948548
www.fct.unl.pt                apoio@fct.unl.pt

fct.unl.pt:~# _