[OpenAFS] !@#$ integrated logon

Noel Burton-Krahn noel@bkbox.com
Thu, 25 Sep 2003 14:49:40 -0700


AFS's integrated login has been a real pain for my users.  Most remove the
windows clients after a few "Integrated Login failed" messages.  You can see
the problem is in afslogon.c.  Even if the LogonOptions  registrey key is 0,
afslogon.dll always waits for the afs services to start, times out, then
fails.  Ugh.

You can totally disable afslogon.dll by removing this key from the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Netwo
rkProvider\AuthentProviderPath

Yahoo! maybe we should fix afslogon.c sometime on th future too.


--Noel


PS: Rob Murawski, your NSIS/OpenAFS.nsi setup is missing a registry key.

To failfully reproduce the (broken) afslogon.dll behaviour, you have to
append "TransarcAFSDaemon" to this registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\NetworkProvider\Provider
Order
(see
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/se
curity/authentication_registry_keys.asp)