[OpenAFS] Custom MSI Question

Hugh Caldwell hcaldwell@usgs.gov
Mon, 1 Feb 2010 16:03:37 -0500


This is a multipart message in MIME format.
--=_alternative 0073A4E0852576BD_=
Content-Type: text/plain; charset="US-ASCII"

After further testing it appears that the log on dialog box only shows up 
when the machine is first rebooted after the installation. This seems to 
be independent of the setting  of the LogonOptions. I can live with this 
behavior. 

Thanks for the help,
 

Hugh Caldwell
Astor & Sanders
EWeb Systems Administrator
United States Geological Survey
 703-648-6812 (Office)
 703-598-3472 (Cellular)
hcaldwell@usgs.gov
Room 2C123B




From:
Jeffrey Altman <jaltman@secure-endpoints.com>
To:
Hugh Caldwell <hcaldwell@usgs.gov>
Cc:
openafs-info@openafs.org
Date:
02/01/2010 01:20 PM
Subject:
Re: [OpenAFS] Custom MSI Question
Sent by:
openafs-info-admin@openafs.org



On 2/1/2010 11:35 AM, Hugh Caldwell wrote:
> 
> Hello,
> 
> I've been tasked with creating a custom msi for our organization and
> have a question that I'm hoping the list can help me with.
> 
> Basically I need to disable integrated authentication. I've discovered
> that setting the
> 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\LogonOptions=dword:00000000
> 
> disables the integrated authentication but a log on window still appears
> when the users log on to the workstation. Toggling "Obtain AFS tokens
> when logging into Windows" in the afs_config app stops this behavior.
> Could someone tell me what settings are being adjusted by the check box
> in the afs_config app?
> 
> If that isn't clear this is the behavior that I'm seeing.
> 
> Create and install an msi with the Logon Option set to 0.
> Logon to windows and the afs logon window pops up.
> Go into afs_config and enable the "Optain AFS tokens" checkbox.
> Log off and back on and get an authentication error.
> Go into afs_config and disable the "Optain AFS tokens" checkbox
> Log off and back on and no window pops up. This is the behavior that I
> would like to have when my msi is first installed.
> 

The answers to your questions are documented in the OpenAFS for Windows
Release Notes.  Start Menu->OpenAFS->Documentation->Release Notes
See Chapter 7 "MSI Deployment Guide".  Specifically 7.2 Configuration
Options.

Jeffrey Altman






--=_alternative 0073A4E0852576BD_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2 face="sans-serif">After further testing it appears that
the log on dialog box only shows up when the machine is first rebooted
after the installation. This seems to be independent of the setting &nbsp;of
the LogonOptions. I can live with this behavior. &nbsp;</font>
<br>
<br><font size=2 face="sans-serif">Thanks for the help,</font>
<br><font size=2 face="sans-serif">&nbsp;</font>
<br><font size=2 face="sans-serif"><br>
Hugh Caldwell<br>
Astor &amp; Sanders<br>
EWeb Systems Administrator<br>
United States Geological Survey<br>
 703-648-6812 (Office)<br>
 703-598-3472 (Cellular)<br>
hcaldwell@usgs.gov<br>
Room 2C123B<br>
</font>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">From:</font>
<td><font size=1 face="sans-serif">Jeffrey Altman &lt;jaltman@secure-endpoints.com&gt;</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">To:</font>
<td><font size=1 face="sans-serif">Hugh Caldwell &lt;hcaldwell@usgs.gov&gt;</font>
<tr>
<td valign=top><font size=1 color=#5f5f5f face="sans-serif">Cc:</font>
<td><font size=1 face="sans-serif">openafs-info@openafs.org</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Date:</font>
<td><font size=1 face="sans-serif">02/01/2010 01:20 PM</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Subject:</font>
<td><font size=1 face="sans-serif">Re: [OpenAFS] Custom MSI Question</font>
<tr valign=top>
<td><font size=1 color=#5f5f5f face="sans-serif">Sent by:</font>
<td><font size=1 face="sans-serif">openafs-info-admin@openafs.org</font></table>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>On 2/1/2010 11:35 AM, Hugh Caldwell wrote:<br>
&gt; <br>
&gt; Hello,<br>
&gt; <br>
&gt; I've been tasked with creating a custom msi for our organization and<br>
&gt; have a question that I'm hoping the list can help me with.<br>
&gt; <br>
&gt; Basically I need to disable integrated authentication. I've discovered<br>
&gt; that setting the<br>
&gt; HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\LogonOptions=dword:00000000<br>
&gt; <br>
&gt; disables the integrated authentication but a log on window still appears<br>
&gt; when the users log on to the workstation. Toggling &quot;Obtain AFS
tokens<br>
&gt; when logging into Windows&quot; in the afs_config app stops this behavior.<br>
&gt; Could someone tell me what settings are being adjusted by the check
box<br>
&gt; in the afs_config app?<br>
&gt; <br>
&gt; If that isn't clear this is the behavior that I'm seeing.<br>
&gt; <br>
&gt; Create and install an msi with the Logon Option set to 0.<br>
&gt; Logon to windows and the afs logon window pops up.<br>
&gt; Go into afs_config and enable the &quot;Optain AFS tokens&quot; checkbox.<br>
&gt; Log off and back on and get an authentication error.<br>
&gt; Go into afs_config and disable the &quot;Optain AFS tokens&quot; checkbox<br>
&gt; Log off and back on and no window pops up. This is the behavior that
I<br>
&gt; would like to have when my msi is first installed.<br>
&gt; <br>
<br>
The answers to your questions are documented in the OpenAFS for Windows<br>
Release Notes. &nbsp;Start Menu-&gt;OpenAFS-&gt;Documentation-&gt;Release
Notes<br>
See Chapter 7 &quot;MSI Deployment Guide&quot;. &nbsp;Specifically 7.2
Configuration<br>
Options.<br>
<br>
Jeffrey Altman<br>
<br>
<br>
<br>
</font></tt>
<br>
<br>
--=_alternative 0073A4E0852576BD_=--