OpenAFS CVS Commit: openafs/src/WINNT/afsd by jaltman
cvs@GRAND.CENTRAL.ORG
cvs@GRAND.CENTRAL.ORG
Thu, 14 Apr 2005 01:46:40 EDT
Update of /cvs/openafs/src/WINNT/afsd
In directory GRAND.CENTRAL.ORG:/home/jaltman/openafs/cvs-1-3/src/WINNT/afsd
Modified Files:
NTMakefile afskfw.c afskfw.h afslogon.c afslogon.def
cm_vnodeops.c smb.h smb3.c
Log Message:
DELTA windows-winlogon-logon-event-20050414
AUTHOR jaltman@secure-endpoints.com
Apparently the problem with multi-domain forests with cross-
realm trusts to non-Windows realms was not entirely solved.
The authentication to the AFS SMB service failed because
the wrong name was being used. Using ASU as an example,
the authentication was being performed with the name
"QAAD\user" (an account in the forest root) and not
"user@ASU.EDU (the MIT Kerberos principal used to login with)
The solution was to add an additional dependency on KFW
in order or to be able to easily obtain the client principal
name stored in the MSLSA ccache TGT. This information is
used in two locations:
- the pioctl() function
- a new WinLogon Event Handler for the "logon" event.
The pioctl function will now be able to use the correct
name when calling WNetAddConnection2() and the "logon"
event handler will now be able to call WNetAddConnection2().
The hope is that the "logon" event handler will be called
before the profile is loaded but I have not guarrantee
that will happen.
--- DELTA config follows ---
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/NTMakefile 1.34 1.35
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/afskfw.c 1.19 1.20
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/afskfw.h 1.2 1.3
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/afslogon.c 1.32 1.33
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/afslogon.def 1.3 1.4
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/cm_vnodeops.c 1.35 1.36
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/smb.h 1.25 1.26
windows-winlogon-logon-event-20050414 openafs/src/WINNT/afsd/smb3.c 1.68 1.69