[OpenAFS] Open AFS client 1.5.59 on windows: writing roaming
profiles failed with windows XP SP 3
Jean Praloran
jeanpralo@gmail.com
Sat, 5 Sep 2009 14:45:44 +0200
--0015175d0396c7cdcd0472d3fe0e
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
If your clients are in a domain try to enable this policy : "Do not check
for user ownership of Roaming Profile Folders"
On Wed, May 27, 2009 at 9:05 AM, Guenter Maier <
guenter.maier@uni-hohenheim.de> wrote:
> Hallo everybody, hallo Jeffrey,
>
> After the migration of our openafs Clients on windows XP Machines (Logon
> with a customized Gina - nd_gina.dll) to openafs client version 1.5.59 th=
e
> write back of the users roaming profile failed with the error message
> "access denied" ("can't create directory" in the debug file userenv.log).
> Loading the profile at logon is no problem! The local System account is
> able to write to the profile path during the complete =93logoff=94 proce=
ss .
> (Tested with a script).
> If I move the profile path (registry) to another location ( Windows netwo=
rk
> share or Novell), the write back of the windows XP user profile succeed!
>
> It seems that during the impersonation process at the logoff process the
> token will be dropped.
>
> Who has any idea for further testing or knows the solution!
>
>
>
> Best regards
>
>
>
> G=FCnter Maier
>
> >
> *************************************************************************=
**
> >
> > G=FCnter Maier
> >
> > Universitaet Hohenheim
> >
> >
> *************************************************************************=
**
> >
> >
> >
>
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
--=20
Praloran Jean
--0015175d0396c7cdcd0472d3fe0e
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
If your clients are in a domain try to enable this policy : "Do not ch=
eck for user ownership of Roaming Profile Folders"<br><br><div class=
=3D"gmail_quote">On Wed, May 27, 2009 at 9:05 AM, Guenter Maier <span dir=
=3D"ltr"><<a href=3D"mailto:guenter.maier@uni-hohenheim.de">guenter.maie=
r@uni-hohenheim.de</a>></span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hallo everybody, =
hallo Jeffrey,<br>
<br>
After the migration of our openafs Clients on windows XP Machines =A0(Logon=
with a customized Gina - nd_gina.dll) to openafs client version 1.5.59 the=
write back of the users roaming profile failed with the error message &quo=
t;access denied" ("can't create directory" in the debug =
file userenv.log). Loading the profile at logon is no problem! The local =
=A0System account is able to write to the profile path during the complete =
=A0=93logoff=94 process . (Tested with a script).<br>
If I move the profile path (registry) to another location ( Windows network=
<br>
share or Novell), the write back of the windows XP user profile succeed!<br=
>
<br>
It seems that during the impersonation process at the logoff process the to=
ken =A0will be dropped.<br>
<br>
Who has any idea for further testing or knows the solution!<br>
<br>
<br>
<br>
Best regards<br>
<br>
<br>
<br>
G=FCnter Maier<br>
<br>
> **********************************************************************=
*****<br>
><br>
> G=FCnter Maier<br>
><br>
> Universitaet Hohenheim<br>
><br>
> **********************************************************************=
*****<br>
><br>
><br>
><br>
<br>
<br>
_______________________________________________<br>
OpenAFS-info mailing list<br>
<a href=3D"mailto:OpenAFS-info@openafs.org">OpenAFS-info@openafs.org</a><br=
>
<a href=3D"https://lists.openafs.org/mailman/listinfo/openafs-info" target=
=3D"_blank">https://lists.openafs.org/mailman/listinfo/openafs-info</a><br>
</blockquote></div><br><br clear=3D"all"><br>-- <br>Praloran Jean<br>
--0015175d0396c7cdcd0472d3fe0e--