[OpenAFS] OpenAFS 1.7.3/Heimdal 1.5.1 64-bit Auto-login oddity

Jeffrey Altman jaltman@secure-endpoints.com
Thu, 15 Dec 2011 10:29:02 -0500

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 12/15/2011 5:45 AM, Jens Wegener wrote:
> Please be aware that there is a bug in the 64bit KfW libraries
> (kfw-amd64-3-2-2.msi). They try to import a wrong DLL (32bit
> krbcc32.dll instead of 64bit krbcc64.dll) and fail.
> You may binary patch:
>    - leashw64.dll
>    - kfwlogon.dll
>    - kfwcpcc.exe

Thanks for noticing.  I will update the Secure Endpoints packages.
Unfortunately, I'm not allowed to distribute them publicly.  Only
support customers will be able to get them.

> You only need some DLLs from the 32bit KfW install package
> for kerberos support in 32bit programs.
> !! They are NOT REQUIRED to get AFS tokens at logon. !!

None of these DLLs are required to get AFS tokens at logon.  AFS tokens
are obtained using afslogon.dll which is shipped as part of OpenAFS and
afslogon.dll does link against krbcc64.dll.

32-bit KFW libraries are only required if you are using 32-bit Kerberos
applications to obtain your AFS tokens.  For example, if you need to use
the 32-bit version of Network Identity Manager because you need krb524

Jeffrey Altman

Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

Version: GnuPG v1.4.9 (MingW32)