[OpenAFS] OpenAFS + Linux +XP
Jeffrey Altman
jaltman@columbia.edu
Thu, 22 Jan 2004 13:00:02 -0500
This is a cryptographically signed message in MIME format.
--------------ms060502000500080708070005
Content-Type: multipart/alternative;
boundary="------------070909010800040307080108"
This is a multi-part message in MIME format.
--------------070909010800040307080108
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Rodney uses a modified version of the integrated login which performs
the kinit and aklog
steps in an external process instead of relying on the k4 support built
into OpenAFS.
More than likely he is bypassing the cause of the blue screen.
Jeffrey Altman
ted creedon wrote:
>1. It's the only blue screen in 4 years on a 2K server. But perhaps you're
>right.
>2. Your technical paper is excellent. Which brings up the next point:
>3. The official documentation needs some serious upgrading.
>
>tedc
>
>
>
>
>-----Original Message-----
>From: openafs-info-admin@openafs.org [mailto:openafs-info-admin@openafs.org]
>On Behalf Of Rodney M Dyer
>Sent: Thursday, January 22, 2004 9:14 AM
>To: openafs-info@openafs.org
>Subject: RE: [OpenAFS] OpenAFS + Linux +XP
>
>At 11:30 AM 1/22/2004, Eggert, Richard W, II (Rich), GVSOL wrote:
>
>
>>I find the integrated login to be very unstable (it causes blue screen
>>of death and random reboots sometimes), so I don't use it. Then again,
>>I'm the only person using my cell (with multiple accounts), so I can do
>>things however I want to.
>>
>
>Well I know this isn't right. We've got well over 500 XP-SP1 machines of
>all various flavors of processor and ram/disk sizes from Dell and
>Gateway. I've never once got a blue screen because of integrated
>logon. We've been running both Transarc (years) and OpenAFS (during the
>last year) without integrated logon problems. You must be having other
>problems with your systems.
>
>The best way to handle multiple accounts on XP workstations is to go ahead
>and do things right the first time by creating a proper MS AD domain. You
>will save yourself lots of grief this way. Then, just create a script on
>the AD server that syncronizes AD accounts with your unix password
>file. Note that our AD accounts have random passwords that the user's
>don't know. The AD is setup to trust the MIT K5 kdc credentials using
>cross realm authentication.
>
>See my website for more information...
>
>http://www.coe.uncc.edu/~rmdyer
>http://www.coe.uncc.edu/~rmdyer/krblogon.htm
>
>Rodney
>
>Rodney M. Dyer
>Windows Systems Programmer
>Mosaic Computing Group
>William States Lee College of Engineering
>University of North Carolina at Charlotte
>Email: rmdyer@uncc.edu
>Web: http://www.coe.uncc.edu/~rmdyer
>Phone (704)687-3518
>Help Desk Line (704)687-3150
>FAX (704)687-2352
>Office 267 Smith Building
>
>
>
>_______________________________________________
>OpenAFS-info mailing list
>OpenAFS-info@openafs.org
>https://lists.openafs.org/mailman/listinfo/openafs-info
>
>_______________________________________________
>OpenAFS-info mailing list
>OpenAFS-info@openafs.org
>https://lists.openafs.org/mailman/listinfo/openafs-info
>
--------------070909010800040307080108
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Bitstream Cyberbit">Rodney uses a modified version of the
integrated login which performs the kinit and aklog<br>
steps in an external process instead of relying on the k4 support built
into OpenAFS.<br>
More than likely he is bypassing the cause of the blue screen.<br>
<br>
Jeffrey Altman<br>
<br>
<br>
ted creedon wrote:<br>
</font>
<blockquote cite="mid012001c3e10e$970bf1c0$a701010a@teddoris.fam"
type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">1. It's the only blue screen in 4 years on a 2K server. But perhaps you're
right.
2. Your technical paper is excellent. Which brings up the next point:
3. The official documentation needs some serious upgrading.
tedc
-----Original Message-----
From: <a class="moz-txt-link-abbreviated" href="mailto:openafs-info-admin@openafs.org">openafs-info-admin@openafs.org</a> [<a class="moz-txt-link-freetext" href="mailto:openafs-info-admin@openafs.org">mailto:openafs-info-admin@openafs.org</a>]
On Behalf Of Rodney M Dyer
Sent: Thursday, January 22, 2004 9:14 AM
To: <a class="moz-txt-link-abbreviated" href="mailto:openafs-info@openafs.org">openafs-info@openafs.org</a>
Subject: RE: [OpenAFS] OpenAFS + Linux +XP
At 11:30 AM 1/22/2004, Eggert, Richard W, II (Rich), GVSOL wrote:
</font></pre>
<blockquote type="cite">
<pre wrap=""><font face="Bitstream Cyberbit">I find the integrated login to be very unstable (it causes blue screen
of death and random reboots sometimes), so I don't use it. Then again,
I'm the only person using my cell (with multiple accounts), so I can do
things however I want to.
</font></pre>
</blockquote>
<pre wrap=""><!----><font face="Bitstream Cyberbit">
Well I know this isn't right. We've got well over 500 XP-SP1 machines of
all various flavors of processor and ram/disk sizes from Dell and
Gateway. I've never once got a blue screen because of integrated
logon. We've been running both Transarc (years) and OpenAFS (during the
last year) without integrated logon problems. You must be having other
problems with your systems.
The best way to handle multiple accounts on XP workstations is to go ahead
and do things right the first time by creating a proper MS AD domain. You
will save yourself lots of grief this way. Then, just create a script on
the AD server that syncronizes AD accounts with your unix password
file. Note that our AD accounts have random passwords that the user's
don't know. The AD is setup to trust the MIT K5 kdc credentials using
cross realm authentication.
See my website for more information...
<a class="moz-txt-link-freetext" href="http://www.coe.uncc.edu/~rmdyer">http://www.coe.uncc.edu/~rmdyer</a>
<a class="moz-txt-link-freetext" href="http://www.coe.uncc.edu/~rmdyer/krblogon.htm">http://www.coe.uncc.edu/~rmdyer/krblogon.htm</a>
Rodney
Rodney M. Dyer
Windows Systems Programmer
Mosaic Computing Group
William States Lee College of Engineering
University of North Carolina at Charlotte
Email: <a class="moz-txt-link-abbreviated" href="mailto:rmdyer@uncc.edu">rmdyer@uncc.edu</a>
Web: <a class="moz-txt-link-freetext" href="http://www.coe.uncc.edu/~rmdyer">http://www.coe.uncc.edu/~rmdyer</a>
Phone (704)687-3518
Help Desk Line (704)687-3150
FAX (704)687-2352
Office 267 Smith Building
_______________________________________________
OpenAFS-info mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a>
<a class="moz-txt-link-freetext" href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info</a>
_______________________________________________
OpenAFS-info mailing list
<a class="moz-txt-link-abbreviated" href="mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a>
<a class="moz-txt-link-freetext" href="https://lists.openafs.org/mailman/listinfo/openafs-info">https://lists.openafs.org/mailman/listinfo/openafs-info</a>
</font></pre>
</blockquote>
</body>
</html>
--------------070909010800040307080108--
--------------ms060502000500080708070005
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms060502000500080708070005--