[OpenAFS-devel] (no subject)

[Douglas E. Engert]

> Jeffrey Altman wrote:
> 
> Douglas E. Engert wrote:
> 
> >> You won't get the dialog if you disable the use of
> >> Kerberos for Windows
> >>
> >
> > I thought it as disabled. Leash Options->AFS Properties
> > has AFS Disabled checked.
> >
> >
> That disables the use of Leash to obtain tokens.
> It does not disable the obtaining of tokens via
> KFW from afscreds.exe.
> 
> Extracted from the doc\txt\winnotes\registry.txt file:
> 

This looks cool. But some questions:

  Shouldn't the EnableKFW flag be a checkbox? 

  KfW can use K4 or K5. How is getting the token when using K5?
    Is it using the K5 ticket with aklog to get a k4/token via krb524d?
  Or 
    Is it using the ticket directly with the RXKAD_TKT_TYPE_KERBEROS_V5    
    or RXKAD_TKT_TYPE_KERBEROS_V5_ENCPART_ONLY? 

> Regkey:
> [HKLM\SOFTWARE\OpenAFS\Client]
> [HKCU\SOFTWARE\OpenAFS\Client]
> 
> Value   : ShowTrayIcon
> Type    : DWORD {0, 1}
> Default : 1
> Function: InitApp(), Main_OnCheckTerminate()
> 
>   This value is used to determine whether or not a shortcut should be
>   maintained in the user's Start Menu->Programs->Startup folder.
> 
>   This value used to be stored at
>   [HKLM\Software\TransarcCorporation\AFS Client\AfsCreds].
> 
> Value   : EnableKFW
> Type    : DWORD {0, 1}
> Default : 1
> Function: KFW_is_available()
> 
>   When MIT Kerberos for Windows can be loaded, Kerberos 5 will be used
>   to obtain AFS credentials.  By setting this value to 0, the internal
>   Kerberos 4 implementation will be used instead.
> 
> Value   : AfscredsShortcutParams
> Type    : REG_SZ
> Default : "-A -M -N -Q"
> Function: Shortcut_FixStartup
> 
>   This value specifies the command line options which should be set
>   as part of the shortcut to afscreds.exe.

-- 

 Douglas E. Engert  <DEEngert@anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444