[OpenAFS] OpenAFS-1.7.1 on Windows 7 32 bit

Jeffrey Altman jaltman@your-file-system.com
Fri, 16 Sep 2011 14:37:40 -0400


This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig8EF4AD714C78300194F7EA70
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 9/16/2011 2:14 PM, Ben Howell wrote:
> From the website:
>=20
> Known Issues:
> On Windows 7 and Windows Server 2008 R2, it is not possible to execute
> an application out of AFS under the following conditions:
> *The path is a drive letter mapping
> *The application requires elevated privileges
> Workaround: use SUBST instead of NET USE to assign drive letters to UNC=

> paths.
>=20
> So running as a different user/elevation to admin doesn't carry over th=
e
> existing credentials? Is there a way to forward open credentials or
> generate temporary credentials when elevating? Or is this simply a
> limitation/security function in Windows?

Elevated processes in the same authentication group share the tokens in
the authentication group.  That is not the problem described above.

The above problem is specific to mapped drive letters (aka
NPAddConnection) whether by NET USE or Explorer Shell.   SUBST drive
letters to UNC paths are not affected.  UNC paths themselves are not
affected.  Executing the software from a command prompt is not affected.

Jeffrey Altman


--------------enig8EF4AD714C78300194F7EA70
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJOc5d2AAoJENxm1CNJffh4YAgIANOTUUCeuBgbVFSgxgsUw5IB
CsBBHHX2kGhclwxVOQ1OGTp4HUwBDbUlCXK6hZqyR/hNgc5KioNgSC4eLOttxqL7
SqkmyDwV4dD9WB2ROkdNUHc5iUgXWPnZfh+vBH/Ysysavrho31OHIGFILJjRYKw4
5khJpocv9q2HIA/cd4yrh+hjiVhcK1/lVuxlA3U2Opo+bqa4AK/6q5y94RpaS9GE
JeXpQQzJGX2rg7G9jj2cix/VBFc1hKyQ3JlaXxcGanmcxhSTapY2y7A3aeRjYD0v
62kVNyK40ycbz1WsfpmX9WF4yR/ITmVolMxtjJGIp2a0w2Nw4p1V11BBjY2/fBw=
=Z47G
-----END PGP SIGNATURE-----

--------------enig8EF4AD714C78300194F7EA70--