[OpenAFS] Custom MSI Question
Hugh Caldwell
hcaldwell@usgs.gov
Mon, 1 Feb 2010 12:53:54 -0500
This is a multipart message in MIME format.
--=_alternative 0062464A852576BD_=
Content-Type: text/plain; charset="US-ASCII"
I do use Orca and create transforms.
I need to know what needs to be modified in the MSI to stop the Log On
dialog box from appearing.
Thanks,
Hugh Caldwell
Astor & Sanders
EWeb Systems Administrator
United States Geological Survey
703-648-6812 (Office)
703-598-3472 (Cellular)
hcaldwell@usgs.gov
Room 2C123B
From:
John Perkins <john@cs.wisc.edu>
To:
Hugh Caldwell <hcaldwell@usgs.gov>
Cc:
openafs-info@openafs.org
Date:
02/01/2010 12:13 PM
Subject:
Re: [OpenAFS] Custom MSI Question
Sent by:
openafs-info-admin@openafs.org
Hugh Caldwell wrote:
>
> Hello,
>
> I've been tasked with creating a custom msi for our organization and
> have a question that I'm hoping the list can help me with.
>
> Basically I need to disable integrated authentication. I've discovered
> that setting the
>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\LogonOptions=dword:00000000
>
> disables the integrated authentication but a log on window still
> appears when the users log on to the workstation. Toggling "Obtain AFS
> tokens when logging into Windows" in the afs_config app stops this
> behavior. Could someone tell me what settings are being adjusted by
> the check box in the afs_config app?
>
> If that isn't clear this is the behavior that I'm seeing.
>
> Create and install an msi with the Logon Option set to 0.
> Logon to windows and the afs logon window pops up.
> Go into afs_config and enable the "Optain AFS tokens" checkbox.
> Log off and back on and get an authentication error.
> Go into afs_config and disable the "Optain AFS tokens" checkbox
> Log off and back on and no window pops up. This is the behavior that I
> would like to have when my msi is first installed.
We make similar changes to our AFS installation at install time (along
with setting the cell name, enabling dynroot, etc.).
I suggest you load a copy of Orca--available from Microsoft, I
believe--and generate a transform for the AFS MSI package to change the
LogonOptions registry key and any other registry settings you care to
make. If you want to make a transformed MSI, use msitran.exe to do that
(also available from Microsoft). Otherwise you can apply the transform
at install time using msiexec:
msiexec /i openafs-en_US-1-5-6900.msi /qn /log
C:\temp\afs_install-1_5_6900.log TRANSFORMS=transform.mst
when you do the initial AFS installation.
If you have any other site configuration parameters to make, you may
want to add those to the transform you generate.
--
=========================================================================
John Perkins | University of Wisconsin-Madison
Researcher | Department of Computer Science
john@cs.wisc.edu | 1210 W. Dayton St.
608-262-0438/608-262-6626 FAX | Madison, WI 53706-1685
=========================================================================
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
--=_alternative 0062464A852576BD_=
Content-Type: text/html; charset="US-ASCII"
<br><font size=2 face="sans-serif">I do use Orca and create transforms.</font>
<br>
<br><font size=2 face="sans-serif">I need to know what needs to be modified
in the MSI to stop the Log On dialog box from appearing.</font>
<br>
<br><font size=2 face="sans-serif">Thanks,</font>
<br><font size=2 face="sans-serif"><br>
Hugh Caldwell<br>
Astor & Sanders<br>
EWeb Systems Administrator<br>
United States Geological Survey<br>
703-648-6812 (Office)<br>
703-598-3472 (Cellular)<br>
hcaldwell@usgs.gov<br>
Room 2C123B<br>
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">From:</font>
<td><font size=1 face="sans-serif">John Perkins <john@cs.wisc.edu></font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">To:</font>
<td><font size=1 face="sans-serif">Hugh Caldwell <hcaldwell@usgs.gov></font>
<tr>
<td valign=top><font size=1 color=#5f5f5f face="sans-serif">Cc:</font>
<td><font size=1 face="sans-serif">openafs-info@openafs.org</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Date:</font>
<td><font size=1 face="sans-serif">02/01/2010 12:13 PM</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Subject:</font>
<td><font size=1 face="sans-serif">Re: [OpenAFS] Custom MSI Question</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Sent by:</font>
<td><font size=1 face="sans-serif">openafs-info-admin@openafs.org</font></table>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>Hugh Caldwell wrote:<br>
><br>
> Hello,<br>
><br>
> I've been tasked with creating a custom msi for our organization and
<br>
> have a question that I'm hoping the list can help me with.<br>
><br>
> Basically I need to disable integrated authentication. I've discovered
<br>
> that setting the <br>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\LogonOptions=dword:00000000
<br>
><br>
> disables the integrated authentication but a log on window still <br>
> appears when the users log on to the workstation. Toggling "Obtain
AFS <br>
> tokens when logging into Windows" in the afs_config app stops
this <br>
> behavior. Could someone tell me what settings are being adjusted by
<br>
> the check box in the afs_config app?<br>
><br>
> If that isn't clear this is the behavior that I'm seeing.<br>
><br>
> Create and install an msi with the Logon Option set to 0.<br>
> Logon to windows and the afs logon window pops up.<br>
> Go into afs_config and enable the "Optain AFS tokens" checkbox.<br>
> Log off and back on and get an authentication error.<br>
> Go into afs_config and disable the "Optain AFS tokens" checkbox<br>
> Log off and back on and no window pops up. This is the behavior that
I <br>
> would like to have when my msi is first installed.<br>
We make similar changes to our AFS installation at install time (along
<br>
with setting the cell name, enabling dynroot, etc.).<br>
<br>
I suggest you load a copy of Orca--available from Microsoft, I <br>
believe--and generate a transform for the AFS MSI package to change the
<br>
LogonOptions registry key and any other registry settings you care to <br>
make. If you want to make a transformed MSI, use msitran.exe to do
that <br>
(also available from Microsoft). Otherwise you can apply the transform
<br>
at install time using msiexec:<br>
msiexec /i openafs-en_US-1-5-6900.msi /qn /log <br>
C:\temp\afs_install-1_5_6900.log TRANSFORMS=transform.mst<br>
when you do the initial AFS installation.<br>
<br>
If you have any other site configuration parameters to make, you may <br>
want to add those to the transform you generate.<br>
<br>
--<br>
=========================================================================<br>
John Perkins
| University of Wisconsin-Madison<br>
Researcher
| Department of Computer Science<br>
john@cs.wisc.edu
| 1210 W. Dayton St.<br>
608-262-0438/608-262-6626 FAX | Madison, WI 53706-1685<br>
=========================================================================<br>
<br>
_______________________________________________<br>
OpenAFS-info mailing list<br>
OpenAFS-info@openafs.org<br>
</font></tt><a href="https://lists.openafs.org/mailman/listinfo/openafs-info"><tt><font size=2>https://lists.openafs.org/mailman/listinfo/openafs-info</font></tt></a><tt><font size=2><br>
</font></tt>
<br>
<br>
--=_alternative 0062464A852576BD_=--