[OpenAFS] Re: OpenAFS-info digest, Vol 1 #1230 - 16 msgs

Ted Anderson TedAnderson@mindspring.com
Thu, 05 Jun 2003 08:45:57 -0400


On 6/5/2003 07:25, Meghadri Ghosh wrote:
>>On Wed, 4 Jun 2003, Harald Pobloth wrote:
>>>after all the talking about encryption ... How do I permanently activate
>>>encryption using windowsXP and OpenAFS 1.2.8a client

> To use the encryption mechanism built into AFS, for a Windows client, set the following registry value named
> SecurityLevel under HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters to 2. This is what we are doing
> currently at Stanford with an MSI based distribution that provides the bare minimum of the OpenAFS binaries needed to
> get the client working on W2K and later versions. My testing has consisted of running a sniffer on the machine with
> either having this setting as specified or it not being present, and it seems to work.

This was a useful bit of information, so I added it to the Wiki[1].  I 
was a little surprised that question 3.28 was already asked, but hadn't 
been answered before.  So I answered it first.  I also found some 
instructions for RedHat Linux which I also added.  Please check and see 
if I got this item right.

Ted Anderson

[1] 
https://grand.central.org/twiki/bin/view/AFSLore/AdminFAQ#3_28_Is_the_data_sent_over_the_n