[OpenAFS] OpenAFS 1.7.3/Heimdal 1.5.1 64-bit Auto-login oddity

Jeffrey Altman jaltman@secure-endpoints.com
Wed, 14 Dec 2011 13:05:46 -0500


This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigE7E357F49DD4898B97EE63C6
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 12/14/2011 5:22 AM, Christopher Odenbach wrote:
>=20
> Am 09.12.2011 22:53, schrieb Jeffrey Altman:
>> There is no ability in Vista or Win7 for a ticket to be obtained
>> during the Network Provider logon and stored in the MIT API session
>> credential cache. The explorer logon hook that was used in
>> XP/2003 to do so no longer exists.
>=20
>=20
> This can only be true for 64 Bit Windows 7, because it is running on
> our Windows 7 pool with 32 Bit machines. Logging into the machines
> gets AFS token AND Kerberos ticket!
>=20
> Christopher


Are you sure the Kerberos ticket is not coming from the MSLSA ?



--------------enigE7E357F49DD4898B97EE63C6
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJO6OV6AAoJENxm1CNJffh4V7IIAKkJ0Z5YuE95rk6agwmnqepW
mZ8gqvnvGiFrKpoSQ9ip313jjPixjBwGr/rwko31HQW2ZJ8fPPj87dRa8/eLFq+a
iTteN0mtUcwz3b0xgTGYpqFWNaKQA8BwhVqRsdvmNKMhZ7UVM383+/Sj9yT/Lt6i
uP48RdguuZYLd4iBX/0jkfCGK2l/CsWVjyZgTOn6DLg/KLHZVJY/fWn2UBeZ8Avj
GwRfjyA8YkbTeKcoaAn0x0umnAWt2CzuqaQFN8zneaUm4WOeV1XTNVaosEkeiov6
D71v7bDMbnmWovTYI9YZBnzUpeWCMsD5UzJ0eaLYVv6EwgO92PuqkAYeaoQkt38=
=Pe7D
-----END PGP SIGNATURE-----

--------------enigE7E357F49DD4898B97EE63C6--