[OpenAFS] MSI deployment doc available for Secure Endpoints plugin?

Charles Duffy cduffy@spamcop.net
Thu, 02 Feb 2006 08:37:11 -0600

Jeffrey Altman wrote:
> Charles Duffy wrote:
>> Per the subject of this message -- is a MSI deployment document (akin to
>> that available for OpenAFS and KFW proper) available for the Secure
>> Endpoints plugin?
> No.  The plug-in is still in beta form.   It will not be ready
> for final release until after KFW 3.1 is released.
I understand that the release candidate is just that, and that formal
documentation is pending the final version.

That said, I'd still be interested to know the registry settings would
be honored to set a system-wide default of Krb524 use. I'd rather not be
a bother, and indeed tried for a bit of self-help -- running the
binaries through strings to look for registry key names, and then using
RegMon to look at what registry locations were actually being read --
but such turned out not to be fruitful.

I wouldn't mind using KfW 2.6.5, but I've had a great deal of trouble
getting tokens that our AFS servers accept from it -- it's necessary to
force krb524 use (or else the AFS servers reject the tokens, resulting
in even *less* access than system:anyuser), and I don't see a way to do
that documented in the KfW 2.6.5 deployment guide or release notes.