[OpenAFS] OpenAFS 1.7.3/Heimdal 1.5.1 64-bit Auto-login oddity

Jens Wegener jens.wegener@hrz.tu-chemnitz.de
Thu, 15 Dec 2011 11:45:21 +0100 (CET)


On Wed, 14 Dec 2011, Billy Beaudoin wrote:
> That would match with my experience on previous releases on the 1.5.x
> series with KfW on 32-bit Win7.  Always had tickets in the credential
> cache on 32-bit, but never on 64-bit.  I'm poking the 32-bit install
> of 1.7.3/1.5.1 to add the Kerb4 .dlls back in and fix a couple other
> GPO-related issues to make sure that it follows my previous
> experiences as well, but haven't finished yet.

Please be aware that there is a bug in the 64bit KfW libraries
(kfw-amd64-3-2-2.msi). They try to import a wrong DLL (32bit
krbcc32.dll instead of 64bit krbcc64.dll) and fail.

You may binary patch:

    - leashw64.dll
    - kfwlogon.dll
    - kfwcpcc.exe

   rem   x86_64
   rem overwrite defect MSI files with patched binary files
   rem (wrong import of krbcc32.dll replaced with krbcc64.dll)
   rem   file          MD5 original                      MD5 patched
   rem   leashw64.dll  9875d71b9bdf8c2ae4ce6205d72a67e4  695cc07721cece9377a42e7d9ba25680
   rem   kfwlogon.dll  95abc227ae8f1202ea6238fd461fff61  f193f3b86aabbb324147e34b0a780e5b
   rem   kfwcpcc.exe   5e0d4c1abc8227eac1bb9585ec42fb0e  a21ae34a6f3702f84d9519bd4a0c92fc
   copy /b /y "%SourceDir%x86_64-patched64\leashw64.dll" "%ProgramFiles%\MIT\Kerberos\bin\" >> %INSTALL_LOG%
   copy /b /y "%SourceDir%x86_64-patched64\kfwlogon.dll" "%SystemRoot%\System32\"           >> %INSTALL_LOG%
   copy /b /y "%SourceDir%x86_64-patched64\kfwcpcc.exe"  "%SystemRoot%\System32\"           >> %INSTALL_LOG%


You only need some DLLs from the 32bit KfW install package
for kerberos support in 32bit programs.

!! They are NOT REQUIRED to get AFS tokens at logon. !!


Jens Wegener
Chemnitz University of Technology

-- 
Jens Wegener                  | E-Mail: jens.wegener@hrz.tu-chemnitz.de
Universitaetsrechenzentrum    | Phone:  +49 (0)371 531 31137
TU Chemnitz, D-09107 Chemnitz | Fax:    +49 (0)371 531 8 31137