OpenAFS CVS Commit: openafs/src/WINNT/netidmgr_plugin by jaltman

cvs@GRAND.CENTRAL.ORG cvs@GRAND.CENTRAL.ORG
Tue, 08 Jan 2008 12:04:20 EST


Update of /cvs/openafs/src/WINNT/netidmgr_plugin
In directory GRAND.CENTRAL.ORG:/home/jaltman/openafs/cvs-1-3/src/WINNT/netidmgr_plugin

Modified Files:
	afsnewcreds.c 
Log Message:
DELTA windows-nim-afscred-identity-initialization-20080108
AUTHOR asanka@secure-endpoints.com
LICENSE MIT

One of the challenges to deploying NIM has been the configuration of 
AFS token acquisition.  This patch adds a new registry key hierarchy

  HKLM\SOFTWARE\OpenAFS\Client\Realms

which is used to configure the AFS Provider for a new identity based
upon the realm of the identity.  The Realms key contains subkeys for
each realm for which configuration data is being provided

  HKLM\SOFTWARE\OpenAFS\Client\Realms\"RealmName"

"RealmName" contains one optional value, "AFSEnabled", and subkeys for
each Cell that is to be added to the configuration.  "AFSEnabled" defaults
to 0x01.

   HKLM\SOFTWARE\OpenAFS\Client\Realms\"RealmName"\"CellName"

In "CellName", there are two optional values, "Realm" and "MethodName". 
If the values are not specified, the automatic realm and method determination
algorithms are used.

These values can be added to an MSI transform or deployed via Group Policy.



--- DELTA config follows ---
windows-nim-afscred-identity-initialization-20080108 openafs/src/WINNT/netidmgr_plugin/afsnewcreds.c 1.5 1.6