[OpenAFS] The removal of afscreds.exe and afs_config.exe on Windows Vista and Windows 7: Seeking Opinions

Mickey Lane mickeylane33540@gmail.com
Fri, 2 Oct 2009 13:32:55 -0400


Can this proposed configuration be simulated with the current release by =
setting the registry key:

[HKEY_CURRENT_USER\Software\MIT\NetIDMgr\PluginManager\Plugins\AfsCred\Di=
sableafscreds to 1

and deleting or renaming afscreds.exe and afs_config.exe?


Mickey.


> From: openafs-info-admin@openafs.org [mailto:openafs-info-
> admin@openafs.org] On Behalf Of Jeffrey Altman
>
> [...]
>=20
> The Proposal:
>=20
> I propose that beginning with 1.5.66 (whenever that is) that the
> afscreds.exe and afs_config.exe tools not be installed at all on any
> Windows version Vista or beyond and that on 2000, XP and 2003 that
> these
> tools not be installed as part of the default configuration.
>=20
>=20
> The Impact:
>=20
> The afscreds tool provides three sets of functionality:
>=20
>  * token acquisition (and renewal if MIT KFW is present)
>=20
>  * drive mapping
>=20
>  * start/stop the afsd service
>=20
> Network Identity Manager has long been available as a replacement for
> the token acquisition functionality and it is available on any system
> on
> which MIT KFW is present.  The only systems that wouldn't have it are
> clients of cells that are still using kaserver.
>=20
> The drive mapping functionality has been documented as deprecated =
since
> the addition of the loopback installation permitted the use of a
> standard \\AFS UNC server name.  The recommended method for a user to
> create a drive mapping is the Windows Drive Mapping user interface
> provided as part of "[My] Computer" and the Explorer Shell.
>=20
> Starting and stopping the afsd service is an administration function
> that can be performed using the Windows Service MMC.
>=20
> The afs_config.exe tool provides:
>=20
>  * configuration management including cell name, server preferences,
> cellservdb editing,
>    cache size, and advanced tuning parameters
>=20
>  * start/stop functionality
>=20
>  * drive mapping
>=20
> [...]