OpenAFS for Windows 1.5.8 Release Notes

From adb2529e5d394b7c0d00c3d295768321e04d0ab3 Mon Sep 17 00:00:00 2001 From: Jeffrey Altman Date: Mon, 9 Oct 2006 02:22:30 +0000 Subject: [PATCH] DEVEL15-windows-relnotes-20061008 Minor updates for 1.5.9 --- .../en_US/html/ReleaseNotes/logo.htm | 2 +- .../html/ReleaseNotes/relnotes-frames.htm | 77 +- .../en_US/html/ReleaseNotes/relnotes.htm | 5066 +++++++++-------- .../Documentation/en_US/html/index.htm | 4 +- 4 files changed, 2886 insertions(+), 2263 deletions(-) diff --git a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/logo.htm b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/logo.htm index e36d4777da..44593538d6 100644 --- a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/logo.htm +++ b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/logo.htm @@ -3,7 +3,7 @@ -OpenAFS for Windows 1.5.8 Release Notes +OpenAFS for Windows 1.5.9 Release Notes - + @@ -36,7 +93,7 @@ div.Section1 - <body lang=EN-US> + <body lang=EN-US style='tab-interval:36.0pt'> <div class=Section1> <p class=MsoNormal>This page uses frames, but your browser doesn't support them.</p> diff --git a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm index a998fe44ed..1ab77cb603 100644 --- a/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm +++ b/src/WINNT/doc/install/Documentation/en_US/html/ReleaseNotes/relnotes.htm @@ -1,55 +1,129 @@ -<html> +<html xmlns:v="urn:schemas-microsoft-com:vml" +xmlns:o="urn:schemas-microsoft-com:office:office" +xmlns:w="urn:schemas-microsoft-com:office:word" +xmlns:st1="urn:schemas-microsoft-com:office:smarttags" +xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=Content-Type content="text/html; charset=windows-1252"> -<meta name=Generator content="Microsoft Word 11 (filtered)"> -<title>OpenAFS for Windows 1.5.8 Release Notes</title> - +<meta name=ProgId content=Word.Document> +<meta name=Generator content="Microsoft Word 11"> +<meta name=Originator content="Microsoft Word 11"> +<link rel=File-List href="relnotes_files/filelist.xml"> +<title>OpenAFS for Windows 1.5.9 Release Notes</title> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="PostalCode"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="State"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="City"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="Street"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="address"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="country-region"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="PlaceType"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="PlaceName"/> +<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" + name="place"/> + <style>  </style> - + </head> -<body lang=EN-US link=navy vlink=maroon style='line-break:strict'> +<body lang=EN-US link=navy vlink=maroon style='tab-interval:36.0pt;line-break: +strict'> <div class=Section1> -<p class=MsoTitle>OpenAFS for Windows 1.5.8<br> +<p class=MsoTitle>OpenAFS for Windows 1.5.9<br> Release Notes</p> <p class=MsoBodyText>The Andrew File System (AFS) is a location-independent -file system that uses a local cache to increase its performance. An AFS client -accesses files anonymously or via a Kerberos authentication. The global AFS is -partitioned into cells. The AFS cell is a collection of AFS volumes that are -administered by a common entity. AFS cells can be administered by a -department even when the Kerberos realm used for local authentication is -managed by a much larger organization. AFS clients and servers take advantage -of Kerberos cross realm authentication to enable authenticated access by -entities located outside the local realm. Authorization is enforced by the use -of directory level access control lists which can consist of individual or -group identities. </p> +file system that uses a local cache to increase its performance.  An AFS +client accesses files anonymously or via a Kerberos authentication.  The +global AFS is partitioned into cells.  The AFS cell is a collection of AFS +volumes that are administered by a common entity.   AFS cells can be +administered by a department even when the Kerberos realm used for local +authentication is managed by a much larger organization.  AFS clients and +servers take advantage of Kerberos cross realm authentication to enable +authenticated access by entities located outside the local realm.  +Authorization is enforced by the use of directory level access control lists +which can consist of individual or group identities.  </p> -<p class=MsoBodyText>The AFS volume is a tree of files and sub-directories. -AFS volumes are created by administrators and are joined to an AFS cell via the -use of a mount point. Once a volume is created, users can create files and -directories as well as mount points and symlinks within the volume without -regard for the physical location of the volume. Administrators can move the -volume to another server as necessary without the need to notify users. In -fact, the volume move can occur while files in the volume are in use. </p> +<p class=MsoBodyText>The AFS volume is a tree of files and +sub-directories.  AFS volumes are created by administrators and are joined +to an AFS cell via the use of a mount point.   Once a volume is +created, users can create files and directories as well as mount points and +symlinks within the volume without regard for the physical location of the +volume.  Administrators can move the volume to another server as necessary +without the need to notify users.   In fact, the volume move can +occur while files in the volume are in use.  </p> -<p class=MsoBodyText>AFS volumes can be replicated to read-only copies. When -accessing files from a read-only replica, clients will read all of the data -from a single replica. If that replica becomes unavailable, the clients will -failover to any replica that is reachable. Users of the data are unaware of -where the replicas are stored or which one is being accessed. The contents of -the replicas can be updated at any time by <i>releasing</i> the current -contents of the source volume.</p> +<p class=MsoBodyText>AFS volumes can be replicated to read-only +copies.   When accessing files from a read-only replica, clients will +read all of the data from a single replica.   If that replica becomes +unavailable, the clients will failover to any replica that is reachable.  +Users of the data are unaware of where the replicas are stored or which one is +being accessed.   The contents of the replicas can be updated at any +time by <i>releasing</i> the current contents of the source volume.</p> <p class=MsoBodyText>OpenAFS for Windows (OAFW) provides AFS client access -Microsoft Windows operating systems. It strives to maintain transparency such -that the user is unaware of the distinction between the use of AFS and -Microsoft Windows file shares. OAFW can be part of a single sign-on solution -by allowing credentials for a Kerberos principal to be obtained at logon and -for that principal to be used to obtain AFS tokens for one or more cells. -Although OAFW is implemented as a locally installed SMB to AFS gateway, OAFW -maintains the portability of file paths by its use of the <a href="file:///\\AFS">\\AFS</a> -UNC server name.</p> +Microsoft Windows operating systems.  It strives to maintain transparency +such that the user is unaware of the distinction between the use of AFS and +Microsoft Windows file shares.   OAFW can be part of a single sign-on +solution by allowing credentials for a Kerberos principal to be obtained at +logon and for that principal to be used to obtain AFS tokens for one or more +cells.   Although OAFW is implemented as a locally installed SMB to +AFS gateway, OAFW maintains the portability of file paths by its use of the <a +href="file:///\\AFS">\\AFS</a> UNC server name.</p> <p class=MsoBodyText>OpenAFS is the product of an open source development -effort begun on October 31 2000. OpenAFS is maintained and developed by a -group of volunteers with the support of the user community. If you use -OpenAFS as part of your computing infrastructure please contribute to its +effort begun on October 31 2000.  OpenAFS is maintained and developed by a +group of volunteers with the support of the user community.   If you +use OpenAFS as part of your computing infrastructure please contribute to its continued growth.</p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417109">1. Installer Options<span -style='color:windowtext;display:none;text-decoration:none'>. </span><span -style='color:windowtext;display:none;text-decoration:none'>1</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417109">1. Installer +Options<span style='color:windowtext;display:none;mso-hide:all;text-decoration: +none;text-underline:none'>. 1</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417110">2. System Requirements<span -style='color:windowtext;display:none;text-decoration:none'>. </span><span -style='color:windowtext;display:none;text-decoration:none'>2</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417110">2. System +Requirements<span style='color:windowtext;display:none;mso-hide:all;text-decoration: +none;text-underline:none'>. 2</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417111">3. Operational Notes<span -style='color:windowtext;display:none;text-decoration:none'>. </span><span -style='color:windowtext;display:none;text-decoration:none'>2</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417111">3. +Operational Notes<span style='color:windowtext;display:none;mso-hide:all; +text-decoration:none;text-underline:none'>. 2</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417112">4. How to Debug Problems -with OpenAFS for Windows:<span style='color:windowtext;display:none;text-decoration: -none'> </span><span -style='color:windowtext;display:none;text-decoration:none'>11</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417112">4. How to +Debug Problems with OpenAFS for Windows:<span style='color:windowtext; +display:none;mso-hide:all;text-decoration:none;text-underline:none'> 11</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417113">5. Reporting Bugs:<span -style='color:windowtext;display:none;text-decoration:none'> </span><span -style='color:windowtext;display:none;text-decoration:none'>13</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417113">5. Reporting +Bugs:<span style='color:windowtext;display:none;mso-hide:all;text-decoration: +none;text-underline:none'> 13</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417114">6. How to Contribute to -the Development of OpenAFS for Windows<span style='color:windowtext;display: -none;text-decoration:none'>. </span><span -style='color:windowtext;display:none;text-decoration:none'>14</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417114">6. How to +Contribute to the Development of OpenAFS for Windows<span style='color:windowtext; +display:none;mso-hide:all;text-decoration:none;text-underline:none'>. 14</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417115">7. MSI Deployment Guide<span -style='color:windowtext;display:none;text-decoration:none'>. </span><span -style='color:windowtext;display:none;text-decoration:none'>15</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417115">7. MSI +Deployment Guide<span style='color:windowtext;display:none;mso-hide:all; +text-decoration:none;text-underline:none'>. 15</span></a></span></p> -<p class=MsoToc1><span class=MsoHyperlink><a -href="#_Toc115417116">Appendix A: Registry -Values<span style='color:windowtext;display:none;text-decoration:none'>. </span><span -style='color:windowtext;display:none;text-decoration:none'>26</span></a></span></p> +<p class=MsoToc1><span class=MsoHyperlink><a href="#_Toc115417116">Appendix A: +Registry Values<span style='color:windowtext;display:none;mso-hide:all; +text-decoration:none;text-underline:none'>. 26</span></a></span></p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993082"></a><a -name="_Toc126872163"></a><a name="_Toc115417109"></a><a name="_Toc115417037"></a><a -name="_Toc115416098">1. Installer Options</a></h1> +<h1><a name="_Toc115416098"></a><a name="_Toc139993082"></a><a +name="_Toc126872163"></a><a name="_Toc115417109"></a><a name="_Toc115417037"></a><span +style='mso-bookmark:_Toc115416098'>1. Installer Options</span></h1> -<p class=MsoNormal>It can be installed either as a new installation or an upgrade -from previous versions of OpenAFS for Windows or IBM AFS for Windows. -Installers are provided in two forms:</p> +<p class=MsoNormal>It can be installed either as a new installation or an +upgrade from previous versions of OpenAFS for Windows or IBM AFS for +Windows.  Installers are provided in two forms:</p> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'><span -style='font-size:9.0pt'>1.<span style='font:7.0pt "Times New Roman"'>        -</span></span>an executable (.exe) that is built using the Nullsoft Scriptable +style='font-size:9.0pt'>1.</span><span style='font-size:7.0pt;font-family:"Times New Roman"'>        +</span>an executable (.exe) that is built using the Nullsoft Scriptable Installation System, or</p> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'><span -style='font-size:9.0pt'>2.<span style='font:7.0pt "Times New Roman"'>        -</span></span>a Windows Installer package (.msi) that is built using WiX and -can be customized for organizations via the use of MSI Transforms (see <a -href="#_MSI_Deployment_Guide">MSI Deployment -Guide</a>)</p> +style='font-size:9.0pt'>2.</span><span style='font-size:7.0pt;font-family:"Times New Roman"'>        +</span>a Windows Installer package (.msi) that is built using WiX and can be +customized for organizations via the use of MSI Transforms (see <a +href="#_MSI_Deployment_Guide">MSI Deployment Guide</a>)</p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993083"></a><a -name="_Toc126872164"></a><a name="_Toc115417110"></a><a name="_Toc115417038"></a><a -name="_Toc115416099">2. System Requirements</a></h1> +<h1><a name="_Toc115416099"></a><a name="_Toc139993083"></a><a +name="_Toc126872164"></a><a name="_Toc115417110"></a><a name="_Toc115417038"></a><span +style='mso-bookmark:_Toc115416099'>2. System Requirements</span></h1> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993084"></a><a -name="_Toc126872165"></a><a name="_Toc115417039"></a><a name="_Toc115416100">2.1 -Supported Operating Systems</a></h2> +<h2><a name="_Toc115416100"></a><a name="_Toc139993084"></a><a +name="_Toc126872165"></a><a name="_Toc115417039"></a><span style='mso-bookmark: +_Toc115416100'>2.1 Supported Operating Systems</span></h2> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 2000 Workstation</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 2000 Workstation</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 2000 Server</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 2000 Server</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows XP Home</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows XP Home</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows XP Professional</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows XP Professional</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows XP 64</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows XP 64</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 2003 Server (32-bit and 64-bit Intel)</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 2003 Server (32-bit and 64-bit Intel)</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 2003 R2 Server (32-bit and 64-bit Intel)</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 2003 R2 Server (32-bit and 64-bit Intel)</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows Vista Beta 2 (32-bit and 64-bit Intel) (not -for production use)</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows Vista RC2 (32-bit and 64-bit Intel)  (not for production use)</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993085"></a><a -name="_Toc126872166"></a><a name="_Toc115416101">2.1.1 Unsupported Operating -Systems</a></h3> +<h3><a name="_Toc115416101"></a><a name="_Toc139993085"></a><a +name="_Toc126872166"></a><span style='mso-bookmark:_Toc115416101'>2.1.1 +Unsupported Operating Systems</span></h3> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 95</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 95</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 98</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 98</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows 98 OSR2</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows 98 OSR2</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft Windows ME</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +Windows ME</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Microsoft NT</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Microsoft +NT</p> <p class=MsoNormal>Older releases of OpenAFS are available for download if -unsupported operating systems must be used. The last version of OpenAFS with -support for Win9x is 1.2.2b. The last version with support for Windows NT 4.0 -is 1.2.10.</p> +unsupported operating systems must be used.  The last version of OpenAFS +with support for Win9x is 1.2.2b.  The last version with support for +Windows NT 4.0 is 1.2.10.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993086"></a><a -name="_Toc126872167"></a><a name="_Toc115417040"></a><a name="_Toc115416102">2.2 -Disk Space</a></h2> +<h2><a name="_Toc115416102"></a><a name="_Toc139993086"></a><a +name="_Toc126872167"></a><a name="_Toc115417040"></a><span style='mso-bookmark: +_Toc115416102'>2.2 Disk Space</span></h2> <p class=MsoNormal>Up to 60mb required for the OpenAFS binaries plus 100MB for -the default AFSCache file. (The size of the AFSCache file may be adjusted via -the Registry after installation.)</p> +the default AFSCache file.   (The size of the AFSCache file may be +adjusted via the Registry after installation.)</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993087"></a><a -name="_Toc126872168"></a><a name="_Toc115417041"></a><a name="_Toc115416103">2.3 -Additional Software</a> Packages</h2> +<h2><a name="_Toc115416103"></a><a name="_Toc139993087"></a><a +name="_Toc126872168"></a><a name="_Toc115417041"></a><span style='mso-bookmark: +_Toc115416103'>2.3 Additional Software</span> Packages</h2> <p class=MsoNormal><a href="http://web.mit.edu/kerberos/dist/index.html">MIT Kerberos for Windows</a> 2.6.x or 3.x.x if Kerberos 5 authentication support is desired.</p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993088"></a><a -name="_Toc126872169"></a><a name="_Toc115417111"></a><a name="_Toc115417042"></a><a -name="_Toc115416104">3. Operational Notes</a></h1> +<h1><a name="_Toc115416104"></a><a name="_Toc139993088"></a><a +name="_Toc126872169"></a><a name="_Toc115417111"></a><a name="_Toc115417042"></a><span +style='mso-bookmark:_Toc115416104'>3. Operational Notes</span></h1> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993089"></a><a -name="_Toc126872170"></a><a name="_Toc115417043"></a><a name="_Toc115416105">3.1. -Requirements for Kerberos 5 Authentication</a></h2> +<h2><a name="_Toc115416105"></a><a name="_Toc139993089"></a><a +name="_Toc126872170"></a><a name="_Toc115417043"></a><span style='mso-bookmark: +_Toc115416105'>3.1. Requirements for Kerberos 5 Authentication</span></h2> <p class=MsoNormal>The Kerberos 4 infrastructure on which the OpenAFS 1.2 -series is reliant is no longer secure. Cross-realm Kerberos is very important -in the AFS context and most sites have or are migrating to Kerberos 5 -environments. The OpenAFS 1.4 series integrates with MIT Kerberos for Windows -2.6.5 and above to support Kerberos 5 authentication including automatic -renewal of AFS tokens and single sign-on via the Microsoft Windows Kerberos -Logon Service.</p> +series is reliant is no longer secure.  Cross-realm Kerberos is very +important in the AFS context and most sites have or are migrating to Kerberos 5 +environments.  The OpenAFS 1.4 series integrates with MIT Kerberos for +Windows 2.6.5 and above to support Kerberos 5 authentication including +automatic renewal of AFS tokens and single sign-on via the Microsoft Windows +Kerberos Logon Service.</p> <p class=MsoNormal>When KFW is installed, the OpenAFS 1.4 client will obtain -Kerberos 5 tickets and use them as tokens without modification. The OpenAFS -1.4 client requires that all of the AFS Servers with which it communicates -support the use of Kerberos 5 tickets as tokens. If Kerberos 5 based tokens are -presented to an AFS server that does not understand them, the server will be -unable to communicate with the client when tokens are present. Kerberos 5 based -tokens are supported by OpenAFS release 1.2.8 or later. IBM Transarc servers -do not support Kerberos 5.</p> +Kerberos 5 tickets and use them as tokens without modification.  The +OpenAFS 1.4 client requires that all of the AFS Servers with which it +communicates support the use of Kerberos 5 tickets as tokens. If Kerberos 5 +based tokens are presented to an AFS server that does not understand them, the +server will be unable to communicate with the client when tokens are present. +Kerberos 5 based tokens are supported by OpenAFS release 1.2.8 or later.  +IBM Transarc servers do not support Kerberos 5.</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993090"></a><a -name="_Toc126872171"></a><a name="_Toc115416106">3.1.1. Active Directory</a></h3> +<h3><a name="_Toc115416106"></a><a name="_Toc139993090"></a><a +name="_Toc126872171"></a><span style='mso-bookmark:_Toc115416106'>3.1.1. Active +Directory</span></h3> <p class=MsoNormal>There are two things to consider when using a Microsoft Windows Active Directory as the Kerberos realm that issues the AFS service -ticket. First, the Kerberos 5 tickets issued by Active Directory can be quite -large when compared to tickets issued by a traditional KDC due to the -incorporation of authorization data in the PAC. If the issued tickets become -larger than 344 bytes OpenAFS 1.2 servers will be unable to process them. -OpenAFS 1.4 servers can support the largest tickets that Active Directory can -issue. Second, the Kerberos 5 tickets issued by Windows 2003 Active Directory -are encrypted with the DES-CBC-MD5 enctype. OpenAFS 1.2 servers only support -the DES-CBC-CRC enctype.</p> +ticket.  First, the Kerberos 5 tickets issued by Active Directory can be +quite large when compared to tickets issued by a traditional KDC due to the +incorporation of authorization data in the <st1:place w:st="on">PAC.</st1:place>  +If the issued tickets become larger than 344 bytes OpenAFS 1.2 servers will be +unable to process them.  OpenAFS 1.4 servers can support the largest +tickets that Active Directory can issue.  Second, the Kerberos 5 tickets +issued by Windows 2003 Active Directory are encrypted with the DES-CBC-MD5 +enctype.  OpenAFS 1.2 servers only support the DES-CBC-CRC enctype.</p> <p class=MsoNormal>Microsoft has documented in <a href="http://support.microsoft.com/kb/832572/">Knowledge Base article 832572</a> a new NO_AUTH_REQUIRED flag that can be set on the account mapped to the AFS -service principal which will prevent the generation of a PAC.</p> +service principal which will prevent the generation of a <st1:place w:st="on">PAC.</st1:place></p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993091"></a><a -name="_Toc126872172"></a><a name="_Toc115416107">3.1.2. Using the krb524 -service</a></h3> +<h3><a name="_Toc115416107"></a><a name="_Toc139993091"></a><a +name="_Toc126872172"></a><span style='mso-bookmark:_Toc115416107'>3.1.2. Using +the krb524 service</span></h3> <p class=MsoNormal>Some organizations which have AFS cell names and Kerberos realm names which differ by more then just lower and upper case rely on a modification to krb524d which maps a Kerberos 5 ticket from realm FOO to a -Kerberos 4 ticket in realm BAR. This allows user@FOO to appear to be user@bar -for the purposes of accessing the AFS cell. As of OpenAFS 1.2.8, support was -added to allow the immediate use of Kerberos 5 tickets as AFS (2b) tokens. This -is the first building block necessary to break away from the limitations of -Kerberos 4 with AFS. By using Kerberos 5 directly we avoid the security holes -inherent in Kerberos 4 cross-realm. We also gain access to cryptographically stronger -algorithms for authentication and encryption. </p> +Kerberos 4 ticket in realm BAR.  This allows user@FOO to appear to be +user@bar for the purposes of accessing the AFS cell.  As of OpenAFS 1.2.8, +support was added to allow the immediate use of Kerberos 5 tickets as AFS (2b) +tokens. This is the first building block necessary to break away from the +limitations of Kerberos 4 with AFS.  By using Kerberos 5 directly we avoid +the security holes inherent in Kerberos 4 cross-realm.  We also gain +access to cryptographically stronger algorithms for authentication and +encryption. </p> <p class=MsoNormal>Another reason for using Kerberos 5 directly is because the krb524 service runs on a port (4444) which has become increasingly blocked by -ISPs. The port was used to spread a worm which attacked Microsoft Windows in -the summer of 2003. When the port is blocked users find that they are unable -to authenticate.</p> +ISPs.  The port was used to spread a worm which attacked Microsoft Windows +in the summer of 2003.  When the port is blocked users find that they are +unable to authenticate.</p> <p class=MsoNormal>Replacing the Kerberos 4 ticket with a Kerberos 5 ticket is a win in all situations except when the cell name does not match the realm name and the principal names placed into the ACL’s are not the principal names from -the Kerberos 5 ticket. To support this transition, OpenAFS for Windows 1.4 -adds a new registry value, <i><a -href="#_Value___: Use524">Use524</a></i>, to -force the use of krb524d. However, the availability of this option should only -be used by individuals until such time as their organizations can provide a -more permanent solution.</p> +the Kerberos 5 ticket.  To support this transition, OpenAFS for Windows +1.4 adds a new registry value, <i><a href="#_Value___:_Use524">Use524</a></i>, +to force the use of krb524d.  However, the availability of this option +should only be used by individuals until such time as their organizations can +provide a more permanent solution.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993092"></a><a -name="_Toc126872173"></a><a name="_Toc115417044"></a><a name="_Toc115416108">3.2. -Use of the Microsoft Loopback Adapter</a></h2> +<h2><a name="_Toc115416108"></a><a name="_Toc139993092"></a><a +name="_Toc126872173"></a><a name="_Toc115417044"></a><span style='mso-bookmark: +_Toc115416108'>3.2. Use of the Microsoft Loopback Adapter</span></h2> <p class=MsoNormal>By itself the OpenAFS Client Service does not provide robust -behavior in a plug-n-play network environment. Changes to the number of +behavior in a plug-n-play network environment.  Changes to the number of network adapters or their assigned IP addresses will cause the service to -terminate unexpectedly. To avoid this behavior OpenAFS for Windows installs a -single instance of the Microsoft Loopback Adapter (MLA) on the machine. With -the MLA installed, the OpenAFS Client Service will not be affected by the -configuration changes of other network adapters installed on the system. </p> +terminate unexpectedly.  To avoid this behavior OpenAFS for Windows +installs a single instance of the Microsoft Loopback Adapter (MLA) on the +machine.  With the MLA installed, the OpenAFS Client Service will not be +affected by the configuration changes of other network adapters installed on +the system.  </p> <p class=MsoNormal>The MLA is installed with a name of "AFS" and a -pre-assigned IP address in the 10.x.x.x range. The MLA is bound to the “Client -for Microsoft Networks” service and not bound to the “File and Printer Sharing -for Microsoft Networks”. If the MLA is unbound to "Client Microsoft -Networks", the OpenAFS Client Service will become inaccessible when the -machine is disconnected from the network. If the MLA is bound to "File -and Printer Sharing ..." there will be a service type collision between -the name "AFS" and the name of the machine on the MLA's IP Address -that will result in the OpenAFS client service becoming inaccessible and the -"NET VIEW \\AFS" command will return a "System Error 52" -message. To correct the problem:</p> +pre-assigned IP address in the 10.x.x.x range.  The MLA is bound to the +“Client for Microsoft Networks” service and not bound to the “File and Printer +Sharing for Microsoft Networks”.  If the MLA is unbound to "Client +Microsoft Networks", the OpenAFS Client Service will become inaccessible +when the machine is disconnected from the network.  If the MLA is bound to +"File and Printer Sharing ..." there will be a service type collision +between the name "AFS" and the name of the machine on the MLA's IP +Address that will result in the OpenAFS client service becoming inaccessible +and the "NET VIEW \\AFS" command will return a "System Error +52" message.  To correct the problem:</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span> stop the AFS Client Service</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span> stop +the AFS Client Service</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span> bind the "Client for Microsoft Networks" to the MLA</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span> bind +the "Client for Microsoft Networks" to the MLA</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span> unbind "File and Printer Sharing for Microsoft -Networks" from the MLA</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span> unbind +"File and Printer Sharing for Microsoft Networks" from the MLA</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span> Disable and then re-enable the MLA</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span> Disable +and then re-enable the MLA</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span> start the AFS Client Service</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span> start +the AFS Client Service</p> <p class=MsoNormal>When the MLA is not installed the unique NETBIOS name -published by OpenAFS SMB server is "<i>MACHINE</i>-AFS". One of the -benefits of using the MLA is that the NETBIOS name does not have to be -published on any adapter other than the MLA. Therefore the chosen name is no -longer required to be unique. Instead the NETBIOS name associated with the AFS -Client Service is simply "AFS" and portable UNC paths of the form \\AFS\cellname\path -can now be used on all machines.</p> +published by OpenAFS SMB server is "<i>MACHINE</i>-AFS".  One of +the benefits of using the MLA is that the NETBIOS name does not have to be +published on any adapter other than the MLA.  Therefore the chosen name is +no longer required to be unique.  Instead the NETBIOS name associated with +the AFS Client Service is simply "AFS" and portable UNC paths of the +form \\AFS\cellname\path can now be used on all machines.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993093"></a><a -name="_Toc126872174"></a><a name="_Toc115417045"></a><a name="_Toc115416109">3.3. -Using Freelance (Dynamic Root) Mode to Improve Mobility</a></h2> +<h2><a name="_Toc115416109"></a><a name="_Toc139993093"></a><a +name="_Toc126872174"></a><a name="_Toc115417045"></a><span style='mso-bookmark: +_Toc115416109'>3.3. Using Freelance (Dynamic Root) Mode to Improve Mobility</span></h2> <p class=MsoNormal>Traditionally, when the OpenAFS Client Service starts it -must be able to access the "root.afs" volume of the default cell. -The "root.afs" volume contains the set of mount points to the -"root.cell" volumes of various cells the administrator of the default -cell believes should be accessible. If the "root.afs" volume is -inaccessible when the client service is started, the service will terminate -unexpectedly. Since many users now use laptops or otherwise operate in -disconnected environments in which a VPN may be required to access the cell's -servers, it is often the case that the "root.afs" volume for the -default cell is not reachable and the OpenAFS Client Service will not +must be able to access the "root.afs" volume of the default +cell.  The "root.afs" volume contains the set of mount points to +the "root.cell" volumes of various cells the administrator of the +default cell believes should be accessible.  If the "root.afs" +volume is inaccessible when the client service is started, the service will +terminate unexpectedly.  Since many users now use laptops or otherwise +operate in disconnected environments in which a VPN may be required to access +the cell's servers, it is often the case that the "root.afs" volume +for the default cell is not reachable and the OpenAFS Client Service will not successfully start. </p> <p class=MsoNormal>To allow the OpenAFS Client Service to operate in these environments, a fake "root.afs" volume is dynamically constructed -from mount points and symlinks stored in the local registry. This method of -operation is referred to as Freelance mode.</p> +from mount points and symlinks stored in the local registry.  This method +of operation is referred to as Freelance mode.</p> <p class=MsoNormal>The content of the fake “root.afs” volume is dynamically -modified as cells are accessed. When the fake "root.afs" volume is -initially constructed it will only contain two mount points: a <i>regular path </i>and -<i>read-write path </i>mount point used to access the "root.cell" -volume of the default AFS cell. Any attempt to access a valid cell name will -result in a new mount point being created in the fake "root.afs" -volume. If the cellname begins with a "." the mount point will be a <i>read-write -path</i>; otherwise the mount point will be a <i>regular path</i>. These mount -points are preserved in the registry at key:</p> +modified as cells are accessed.  When the fake "root.afs" volume +is initially constructed it will only contain two mount points: a <i>regular +path </i>and <i>read-write path </i>mount point used to access the +"root.cell" volume of the default AFS cell.  Any attempt to +access a valid cell name will result in a new mount point being created in the +fake "root.afs" volume.  If the cellname begins with a +"." the mount point will be a <i>read-write path</i>; otherwise the +mount point will be a <i>regular path</i>.  These mount points are +preserved in the registry at key:</p> -<p class=PreformattedText style='margin-left:35.45pt'><a +<p class=preformattedtext style='margin-left:35.45pt'><a href="#_Regkey:_[HKLMSOFTWAREOpenAFSClie">HKLM\SOFTWARE\OpenAFS\Client\Freelance</a></p> <p class=MsoNormal>Additional mount points may be manually created using the -"fs mkmount" command. Mount points may be removed using the "fs -rmmount" command.</p> +"fs mkmount" command.  Mount points may be removed using the +"fs rmmount" command.</p> -<p class=PreformattedText style='margin-left:35.45pt'>>fs mkmount +<p class=preformattedtext style='margin-left:35.45pt'>>fs mkmount \\AFS\athena.mit.edu root.cell athena.mit.edu</p> -<p class=PreformattedText style='margin-left:35.45pt'>>fs mkmount +<p class=preformattedtext style='margin-left:35.45pt'>>fs mkmount \\AFS\.athena.mit.edu root.cell athena.mit.edu -rw</p> -<p class=PreformattedText style='margin-left:35.45pt'>>fs rmmount -\\AFS\athena.mit.edu</p> +<p class=preformattedtext style='margin-left:35.45pt'>>fs rmmount \\AFS\athena.mit.edu</p> -<p class=PreformattedText style='margin-left:35.45pt'>>fs rmmount +<p class=preformattedtext style='margin-left:35.45pt'>>fs rmmount \\AFS\.athena.mit.edu</p> <p class=MsoNormal>Symlinks may also be created within the Freelance “root.afs” volume.</p> -<p class=PreformattedText style='margin-left:35.45pt'>>symlink make \\afs\link -\\afs\athena.mit.edu\user\j\a\jaltman</p> +<p class=preformattedtext style='margin-left:35.45pt'>>symlink make +\\afs\link \\afs\athena.mit.edu\user\j\a\jaltman</p> -<p class=PreformattedText> >symlink list \\afs\link</p> +<p class=preformattedtext>      >symlink list +\\afs\link</p> -<p class=PreformattedText> '\\afs\link' is a symlink to -'athena.mit.edu\user\j\a\jaltman'</p> +<p class=preformattedtext>      '\\afs\link' is a +symlink to 'athena.mit.edu\user\j\a\jaltman'</p> -<p class=PreformattedText style='margin-left:35.45pt'>>symlink rm \\afs\link</p> +<p class=preformattedtext style='margin-left:35.45pt'>>symlink rm \\afs\link</p> <p class=MsoNormal>The symlinks are stored in the registry at:</p> -<p class=PreformattedText style='margin-left:35.45pt'><a -href="#_Regkey:_[HKLMSOFTWAREOpenAFSClie_1">HKLM\SOFTWARE\OpenAFS\Client\Freelance\Symlinks</a> </p> +<p class=preformattedtext style='margin-left:35.45pt'><a +href="#_Regkey:_[HKLMSOFTWAREOpenAFSClie_1">HKLM\SOFTWARE\OpenAFS\Client\Freelance\Symlinks</a> </p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993094"></a><a -name="_Toc126872175"></a><a name="_Toc115417046"></a><a name="_Toc115416110">3.4. -Locating AFS Volume Database Servers</a> </h2> +<h2><a name="_Toc115416110"></a><a name="_Toc139993094"></a><a +name="_Toc126872175"></a><a name="_Toc115417046"></a><span style='mso-bookmark: +_Toc115416110'>3.4. Locating AFS Volume Database Servers</span> </h2> <p class=MsoNormal>The OpenAFS for Windows client will use DNS AFSDB records to discover the location of AFS Volume Database servers when entries are not present in the client's CellServDB file (\%PROGRAMFILES%\OpenAFS\Client\CellServDB).</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993095"></a><a -name="_Toc126872176"></a><a name="_Toc115417047"></a><a name="_Toc115416111">3.5. -Obtaining AFS Tokens as a Part of Windows Logon</a></h2> +<h2><a name="_Toc115416111"></a><a name="_Toc139993095"></a><a +name="_Toc126872176"></a><a name="_Toc115417047"></a><span style='mso-bookmark: +_Toc115416111'>3.5. Obtaining AFS Tokens as a Part of Windows Logon</span></h2> <p class=MsoNormal>OpenAFS for Windows installs a WinLogon Network Provider to -provide Single Sign-On functionality (aka Integrated Logon.) Integrated Logon -can be used when the Windows username and password match the username and -password associated with the default cell's Kerberos realm. For example, if -the Windows username is "jaltman" and the default cell is +provide Single Sign-On functionality (aka Integrated Logon.)  Integrated +Logon can be used when the Windows username and password match the username and +password associated with the default cell's Kerberos realm.  For example, +if the Windows username is "jaltman" and the default cell is "athena.mit.edu", then Integrated Logon can be successfully used if the windows password matches the password assigned to the Kerberos principal -"<a href="mailto:jaltman@ATHENA.MIT.EDU">jaltman@ATHENA.MIT.EDU</a>". +"<a href="mailto:jaltman@ATHENA.MIT.EDU">jaltman@ATHENA.MIT.EDU</a>".  The realm “ATHENA.MIT.EDU” is obtained by performing a domain name to realm mapping on the hostname of one of the cell's Volume Database servers.</p> <p class=MsoNormal>Integrated Logon is required if you desire the ability to -store roaming user profiles within the AFS file system. OpenAFS does not +store roaming user profiles within the AFS file system.  OpenAFS does not provide tools for synchronizing the Windows and Kerberos user accounts and passwords.</p> <p class=MsoNormal>When KFW is configured, Integrated Logon will use it to -obtain tokens. The Kerberos 5 tickets obtained during the process of +obtain tokens.  The Kerberos 5 tickets obtained during the process of generating AFS tokens are preserved and stored into the default ccache within the user logon session.</p> @@ -736,45 +954,47 @@ user's username and password for the purpose of obtaining tokens if the Kerberos KDC is inaccessible at logon time.</p> <p class=MsoNormal>Integrated Login supports the ability to obtain tokens for -multiple cells. For further information on how to configure this feature read -the <a href="../relnotes.htm#_Value:_TheseCells">TheseCells</a> value in <a +multiple cells.  For further information on how to configure this feature +read the <a href="../relnotes.htm#_Value:_TheseCells">TheseCells</a> value in <a href="#_Appendix_A:_Registry_Values">Appendix A</a>.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993096"></a><a -name="_Toc126872177"></a><a name="_Toc115417048"></a><a name="_Toc115416112">3.6. -AFS System Tray Command Line Options</a></h2> +<h2><a name="_Toc115416112"></a><a name="_Toc139993096"></a><a +name="_Toc126872177"></a><a name="_Toc115417048"></a><span style='mso-bookmark: +_Toc115416112'>3.6. AFS System Tray Command Line Options</span></h2> <p class=MsoNormal>The AFS System Tray tool (afscreds.exe) supports several command line options: </p> -<p class=PreformattedText> -A = autoinit </p> +<p class=preformattedtext>    -A = autoinit </p> -<p class=PreformattedText> -E = force existing afscreds to exit</p> +<p class=preformattedtext>    -E = force existing afscreds to +exit</p> -<p class=PreformattedText> -I = install startup shortcut</p> +<p class=preformattedtext>    -I = install startup shortcut</p> -<p class=PreformattedText> -M = renew drive maps </p> +<p class=preformattedtext>    -M = renew drive maps </p> -<p class=PreformattedText> -N = IP address change detection </p> +<p class=preformattedtext>    -N = IP address change detection </p> -<p class=PreformattedText> -Q = quiet mode. do not display start service -dialog</p> +<p class=preformattedtext>    -Q = quiet mode.  do not +display start service dialog</p> -<p class=PreformattedText> if afsd_service is not already running</p> +<p class=preformattedtext>         if +afsd_service is not already running</p> -<p class=PreformattedText> -S = show tokens dialog on startup</p> +<p class=preformattedtext>    -S = show tokens dialog on startup</p> -<p class=PreformattedText> -U = uninstall startup shortcut</p> +<p class=preformattedtext>    -U = uninstall startup shortcut</p> -<p class=PreformattedText> -X = test and do map share</p> +<p class=preformattedtext>    -X = test and do map share</p> -<p class=PreformattedText> -Z = unmap drives</p> +<p class=preformattedtext>    -Z = unmap drives</p> <p class=MsoNormal>autoinit will result in automated attempts to acquire AFS -tokens when afscreds.exe is started. afscreds.exe will attempt to utilize +tokens when afscreds.exe is started.  afscreds.exe will attempt to utilize tickets stored in the MSLSA credentials cache; any existing CCAPI credentials -cache; and finally display an Obtain Tokens dialog to the user. When used in -combination with IP address change detection, afscreds.exe will attempt to +cache; and finally display an Obtain Tokens dialog to the user.  When used +in combination with IP address change detection, afscreds.exe will attempt to acquire AFS tokens whenever the IP address list changes and the Kerberos KDC is accessible.</p> @@ -783,73 +1003,73 @@ drive maps constructed via the OpenAFS tools (not NET USE) are re-constructed each time afscreds.exe is started.</p> <p class=MsoNormal>By default afscreds.exe is configured by the OpenAFS.org -installers to use “-A -N -M -Q” as startup options. Currently, there is no -user interface to change this selection after install time although these +installers to use “-A -N -M -Q” as startup options.  Currently, there is +no user interface to change this selection after install time although these options may be altered via the registry on either per machine or per user -basis. See <a -href="#_Value___: AfscredsShortcutParams">AfscredsShortcutParams</a> -in <a href="#_Appendix_A:_Registry_Values">Appendix -A</a>.</p> +basis.  See <a href="#_Value___:_AfscredsShortcutParams">AfscredsShortcutParams</a> +in <a href="#_Appendix_A:_Registry_Values">Appendix A</a>.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993097"></a><a -name="_Toc126872178"></a><a name="_Toc115417049"></a><a name="_Toc115416113">3.7. -The “AFS Client Admins” Authorization Group</a></h2> +<h2><a name="_Toc115416113"></a><a name="_Toc139993097"></a><a +name="_Toc126872178"></a><a name="_Toc115417049"></a><span style='mso-bookmark: +_Toc115416113'>3.7. The “AFS Client Admins” Authorization Group</span></h2> <p class=MsoNormal>The OpenAFS for Windows 1.4 client supports a local Windows -authorization group named "AFS Client Admins". This group is used in -place of the "Administrators" group to determine which users are -allowed to modify the AFS Client Service configuration via the AFS Control -Panel (afs_config.exe) or fs.exe command line tool. The following fs.exe +authorization group named "AFS Client Admins".  This group is +used in place of the "Administrators" group to determine which users +are allowed to modify the AFS Client Service configuration via the AFS Control +Panel (afs_config.exe) or fs.exe command line tool.  The following fs.exe commands are now restricted to members of the "AFS Client Admins" group:</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>checkservers with a non-zero timer value</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>checkservers +with a non-zero timer value</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setcachesize</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setcachesize</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>newcell</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>newcell</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>sysname with a new sysname list</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>sysname +with a new sysname list</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>exportafs</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>exportafs</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setcell</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setcell</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setserverprefs</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setserverprefs</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>storebehind</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>storebehind</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setcrypt</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setcrypt</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>cscpolicy</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>cscpolicy</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>trace</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>trace</p> -<p class=PreformattedText style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>minidump</p> +<p class=preformattedtext style='margin-left:49.6pt;text-indent:-14.15pt'><span +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>minidump</p> <p class=MsoNormal>The creation or removal of mount points and symlinks in the Freelance “root.afs” volume are also restricted to members of the “AFS Client @@ -857,217 +1077,228 @@ Admins <p class=MsoNormal>The initial membership of the "AFS Client Admins" group when created by the installer is equivalent to the local -"Administrators" group. If a user is added to the +"Administrators" group.  If a user is added to the "Administrators" group after the creation of the "AFS Client -Admin" group, that user will not be an AFS Client Administrator. Only -users that are members of the "AFS Client Admins" group are AFS -Client Administrators. The local "SYSTEM" account is an implicit -member of the "AFS Client Admins" group.</p> +Admin" group, that user will not be an AFS Client Administrator.  +Only users that are members of the "AFS Client Admins" group are AFS +Client Administrators.  The local "SYSTEM" account is an +implicit member of the "AFS Client Admins" group.</p> <p class=MsoNormal>Setting the default sysname for a machine should be done via -the <a href="#_Value_:_SysName">registry</a> -and not via "fs sysname".</p> +the <a href="#_Value_:_SysName">registry</a> and not via "fs +sysname".</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993098"></a><a -name="_Toc126872179"></a><a name="_Toc115417050"></a><a name="_Toc115416114">3.8. -OpenAFS support for UNC paths</a> </h2> +<h2><a name="_Toc115416114"></a><a name="_Toc139993098"></a><a +name="_Toc126872179"></a><a name="_Toc115417050"></a><span style='mso-bookmark: +_Toc115416114'>3.8. OpenAFS support for UNC paths</span> </h2> -<p class=MsoNormal>The OpenAFS 1.4 client supports UNC paths everywhere. UNC -paths provide a canonical name for resources stored within AFS. UNC paths -should be used instead of drive letter mappings whenever possible. This is -especially true when specifying the location of roaming profiles and redirected -folders. </p> +<p class=MsoNormal>The OpenAFS 1.4 client supports UNC paths everywhere.  +UNC paths provide a canonical name for resources stored within AFS.  UNC +paths should be used instead of drive letter mappings whenever +possible.   This is especially true when specifying the location of +roaming profiles and redirected folders.  </p> <p class=MsoNormal>Power users that make extensive use of the command line shell, cmd.exe, should consider using JP Software's 4NT or Take Command command -processors. Unlike cmd.exe, the JPSoftware shells fully support UNC paths as -the current directory. With the release of version 4NT 7.0 and Take Command 7.0, -JPSoftware is adding special recognition of OpenAFS. AFS paths can be entered -in UNIX notation (e.g., <a href="file:///\\afs\openafs.org\software">/afs/openafs.org/software</a>), -space utilization reports the output of the volume status for the specified -path, and many AFS specific functions and variables have been added to the -command language.</p> +processors.  Unlike cmd.exe, the JPSoftware shells fully support UNC paths +as the current directory.  With the release of version 4NT 7.0 and Take +Command 7.0, JPSoftware is adding special recognition of OpenAFS.  AFS +paths can be entered in UNIX notation (e.g., <a +href="file:///\\afs\openafs.org\software">/afs/openafs.org/software</a>), space +utilization reports the output of the volume status for the specified path, and +many AFS specific functions and variables have been added to the command +language.</p> <p class=MsoNormal>JPSoftware's web site is <span class=MsoHyperlink>http://www.jpsoft.com</span>.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993099"></a><a -name="_Toc126872180"></a><a name="_Toc115417051"></a><a name="_Toc115416115">3.9. -OpenAFS includes aklog.exe</a></h2> +<h2><a name="_Toc115416115"></a><a name="_Toc139993099"></a><a +name="_Toc126872180"></a><a name="_Toc115417051"></a><span style='mso-bookmark: +_Toc115416115'>3.9. OpenAFS includes aklog.exe</span></h2> <p class=MsoNormal>The OpenAFS 1.4 Client ships with its own version of aklog.exe which should be used in preference to those obtained by third party -sources. The OpenAFS aklog.exe supports Kerberos 5 as well as the ability to -auto-generate AFS IDs within foreign PTS databases.</p> +sources.  The OpenAFS aklog.exe supports Kerberos 5 as well as the ability +to auto-generate AFS IDs within foreign PTS databases.</p> -<p class=PreformattedText>Usage: aklog [-d] [[-cell | -c] cell [-k krb_realm]]</p> +<p class=preformattedtext>Usage: aklog [-d] [[-cell | -c] cell [-k krb_realm]]</p> -<p class=PreformattedText> [[-p | -path] pathname]</p> +<p class=preformattedtext>             +[[-p | -path] pathname]</p> -<p class=PreformattedText> [-noprdb] [-force]</p> +<p class=preformattedtext>             +[-noprdb] [-force]</p> -<p class=PreformattedText> [-5 [-m]| -4]</p> +<p class=preformattedtext>             +[-5 [-m]| -4]</p> -<p class=PreformattedText> </p> +<p class=preformattedtext> </p> -<p class=PreformattedText> -d = output debugging information.</p> +<p class=preformattedtext>   -d = output debugging information.</p> -<p class=PreformattedText> cell = zero or more cells for which tokens will be -obtained</p> +<p class=preformattedtext>   cell = zero or more cells for which +tokens will be obtained</p> -<p class=PreformattedText> krb_realm = the kerberos realm of the cell.</p> +<p class=preformattedtext>   krb_realm = the kerberos realm of the +cell.</p> -<p class=PreformattedText> pathname = the directory for which authentication -is required</p> +<p class=preformattedtext>   pathname = the directory for which +authentication is required</p> -<p class=PreformattedText> -noprdb = don't try to determine AFS ID.</p> +<p class=preformattedtext>   -noprdb = don't try to determine AFS ID.</p> -<p class=PreformattedText> -5 or -4 = use Kerberos V (default) or Kerberos IV -tickets</p> +<p class=preformattedtext>   -5 or -4 = use Kerberos V (default) or +Kerberos IV tickets</p> -<p class=PreformattedText> -m = use krb524d to convert Kerberos V tickets to -Kerberos IV</p> +<p class=preformattedtext>   -m = use krb524d to convert Kerberos V +tickets to Kerberos IV</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993100"></a><a -name="_Toc126872181"></a><a name="_Toc115417052"></a><a name="_Toc115416116">3.10. -OpenAFS Servers on Windows are Unsupported</a></h2> +<h2><a name="_Toc115416116"></a><a name="_Toc139993100"></a><a +name="_Toc126872181"></a><a name="_Toc115417052"></a><span style='mso-bookmark: +_Toc115416116'>3.10. OpenAFS Servers on Windows are Unsupported</span></h2> <p class=MsoNormal>The AFS Server functionality provided with OpenAFS 1.4 might -work but should be considered highly experimental. It has not been thoroughly -tested. Any data which would cause pain if lost should not be stored in an -OpenAFS Server on Windows.</p> +work but should be considered highly experimental.  It has not been +thoroughly tested.  Any data which would cause pain if lost should not be +stored in an OpenAFS Server on Windows.</p> <p class=MsoNormal>A few notes on the usage of the AFS Client Service if it is going to be used with the OpenAFS AFS Server:</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>When installed on the same machine as the AFS Server, Freelance -mode must be turned off. Otherwise, you will be unable to manipulate the -contents of the root.afs volume for the hosted cell.</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>When +installed on the same machine as the AFS Server, Freelance mode must be turned +off.  Otherwise, you will be unable to manipulate the contents of the +root.afs volume for the hosted cell.</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>The AFS Server and related tools only support the built in -kaserver (Kerberos IV). If the AFS Server is being used, MIT Kerberos for -Windows should not be installed or must be disabled.</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>The +AFS Server and related tools only support the built in kaserver (Kerberos +IV).  If the AFS Server is being used, MIT Kerberos for Windows should not +be installed or must be disabled.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993101"></a><a -name="_Toc126872182"></a><a name="_Toc115417053"></a><a name="_Toc115416117">3.11. -OpenAFS Debugging Symbol files</a></h2> +<h2><a name="_Toc115416117"></a><a name="_Toc139993101"></a><a +name="_Toc126872182"></a><a name="_Toc115417053"></a><span style='mso-bookmark: +_Toc115416117'>3.11. OpenAFS Debugging Symbol files</span></h2> <p class=MsoNormal>The OpenAFS for Windows installers now include Debugging Symbol files which should be installed if you are experiencing problems and -need to send crash reports. This is true for both the release and the debug -versions of the installers. The difference between the release and debug -versions are:</p> +need to send crash reports.  This is true for both the release and the +debug versions of the installers.  The difference between the release and +debug versions are:</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>whether or not the binaries were compiled with optimization</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>whether +or not the binaries were compiled with optimization</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>whether the debug symbols are installed by default</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>whether +the debug symbols are installed by default</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>whether additional debug statements were compiled into the -binaries</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>whether +additional debug statements were compiled into the binaries</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993102"></a><a -name="_Toc126872183"></a><a name="_Toc115417054"></a><a name="_Toc115416118">3.12. -</a>Large Files (64-bit) Supported</h2> +<h2><a name="_Toc115416118"></a><a name="_Toc139993102"></a><a +name="_Toc126872183"></a><a name="_Toc115417054"></a><span style='mso-bookmark: +_Toc115416118'>3.12. </span>Large Files (64-bit) Supported</h2> <p class=MsoNormal>As of release 1.5.3, OpenAFS for Windows supports files -larger than 2GB. The maximum file size is now 16777216 terabytes when the AFS -File Server supports large files. If the AFS File Server does not support -large files, then the file size limit remains 2GB.</p> +larger than 2GB.  The maximum file size is now 16777216 terabytes when the +AFS File Server supports large files.   If the AFS File Server does +not support large files, then the file size limit remains 2GB.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993103"></a><a -name="_Toc126872184"></a><a name="_Toc115417055"></a><a name="_Toc115416119">3.13. -Encrypted AFS File Access</a></h2> +<h2><a name="_Toc115416119"></a><a name="_Toc139993103"></a><a +name="_Toc126872184"></a><a name="_Toc115417055"></a><span style='mso-bookmark: +_Toc115416119'>3.13. Encrypted AFS File Access</span></h2> <p class=MsoNormal>The OpenAFS for Windows installer by default activates a weak form of encrypted data transfer between the AFS client and the AFS -servers. This is often referred to as "fcrypt" mode. Encrypted data -transfer can be turned on or off with the “fs crypt” command. Transitions -between “crypt” and “non-crypt” modes are logged to the Windows Application -Event Log. </p> +servers.  This is often referred to as "fcrypt" mode.  +Encrypted data transfer can be turned on or off with the “fs crypt” +command.  Transitions between “crypt” and “non-crypt” modes are logged to +the Windows Application Event Log. </p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993104"></a><a -name="_Toc126872185"></a><a name="_Toc115417056"></a><a name="_Toc115416120">3.14. -Authenticated Access to the OpenAFS Client Service</a></h2> +<h2><a name="_Toc115416120"></a><a name="_Toc139993104"></a><a +name="_Toc126872185"></a><a name="_Toc115417056"></a><span style='mso-bookmark: +_Toc115416120'>3.14. Authenticated Access to the OpenAFS Client Service</span></h2> <p class=MsoNormal>OpenAFS 1.4 supports authenticated SMB connections using -either NTLM or GSS SPNEGO (NTLM). In previous versions of OpenAFS, the SMB -connections were unauthenticated which opened the door for several attacks +either NTLM or GSS SPNEGO (NTLM).  In previous versions of OpenAFS, the +SMB connections were unauthenticated which opened the door for several attacks which could be used to obtain access to another user's tokens on shared -machines. </p> +machines.    </p> <p class=MsoNormal>When GSS SPNEGO attempts a Kerberos 5 authentication, the Windows SMB client will attempt to retrieve service tickets for "cifs/afs@REALM" (if the loopback adapter is in use) or "cifs/machine-afs@REALM" (if the loopback adapter is not being -used). It is extremely important that this service principal not exist in the -KDC database as the Kerberos authentication must fail allowing automatic -fallback to NTLM. When NTLM is used a special local authentication mode will -be used that does not require access to the user's password. Instead, Windows -will internally recognize the request as coming from a local logon session.</p> +used).  It is extremely important that this service principal not exist in +the KDC database as the Kerberos authentication must fail allowing automatic +fallback to NTLM.  When NTLM is used a special local authentication mode +will be used that does not require access to the user's password.  +Instead, Windows will internally recognize the request as coming from a local +logon session.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993105"></a><a -name="_Toc126872186"></a><a name="_Toc115417057"></a><a name="_Toc115416121">3.15. -No More INI Files</a></h2> +<h2><a name="_Toc115416121"></a><a name="_Toc139993105"></a><a +name="_Toc126872186"></a><a name="_Toc115417057"></a><span style='mso-bookmark: +_Toc115416121'>3.15. No More INI Files</span></h2> <p class=MsoNormal>Previous AFS clients for Windows stored configuration data -in Windows .INI files. OpenAFS 1.4 does not use Windows .INI files for the storage -of configuration data. All settings are now stored in the registry (see <a -href="#_Appendix_A:_Registry_Values">Appendix A</a>). +in Windows .INI files.   OpenAFS 1.4 does not use Windows .INI files +for the storage of configuration data.   All settings are now stored +in the registry (see <a href="#_Appendix_A:_Registry_Values">Appendix A</a>).  The CellServDB file is now stored in the %PROGRAMFILES%\OpenAFS\Client -directory. The <i><a -href="#_Value___: CellServDBDir">CellServDBDir</a></i> +directory.   The <i><a href="#_Value___:_CellServDBDir">CellServDBDir</a></i> registry value can be used to specify an alternative location.</p> <p class=MsoNormal>OpenAFS 1.4 will relocate the contents of the “afsdcell.ini” -file to the new CellServDB file. OpenAFS 1.4 will also import the contents of -the “afs_freelance.ini” file to the Windows registry. OpenAFS 1.4 will not -process the contents of the “afsddbmt.ini”.</p> +file to the new CellServDB file.  OpenAFS 1.4 will also import the +contents of the “afs_freelance.ini” file to the Windows registry.   +OpenAFS 1.4 will not process the contents of the “afsddbmt.ini”.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993106"></a><a -name="_Toc126872187"></a><a name="_Toc115417058"></a><a name="_Toc115416122">3.16. -Microsoft Windows Internet Connection Firewall</a></h2> +<h2><a name="_Toc115416122"></a><a name="_Toc139993106"></a><a +name="_Toc126872187"></a><a name="_Toc115417058"></a><span style='mso-bookmark: +_Toc115416122'>3.16. Microsoft Windows Internet Connection Firewall</span></h2> <p class=MsoNormal>The OpenAFS 1.4 Client is compatible with the Internet -Connection Firewall that debuted with Windows XP SP2 and Windows 2003 SP1. The -Internet Connection Firewall will be automatically adjusted to allow the -receipt of incoming callback messages from the AFS file server. In addition, -the appropriate <i>Back Connection</i> registry entries are added to allow SMB -authentication to be performed across the Microsoft Loopback Adapter.</p> +Connection Firewall that debuted with Windows XP SP2 and Windows 2003 +SP1.  The Internet Connection Firewall will be automatically adjusted to +allow the receipt of incoming callback messages from the AFS file server.  +In addition, the appropriate <i>Back Connection</i> registry entries are added +to allow SMB authentication to be performed across the Microsoft Loopback +Adapter.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993107"></a><a -name="_Toc126872188"></a><a name="_Toc115417059"></a><a name="_Toc115416123">3.17. -Browsing AFS from the Explorer Shell and Office</a></h2> +<h2><a name="_Toc115416123"></a><a name="_Toc139993107"></a><a +name="_Toc126872188"></a><a name="_Toc115417059"></a><span style='mso-bookmark: +_Toc115416123'>3.17. Browsing AFS from the Explorer Shell and Office</span></h2> <p class=MsoNormal>The OpenAFS 1.4 Client Service implements the CIFS Remote Admin Protocol which allows Explorer to browse server and share information. This significantly enhances the interoperability of AFS volumes within the Explorer Shell and Microsoft Office applications.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993108"></a><a -name="_Toc126872189"></a><a name="_Toc115417060"></a><a name="_Toc115416124">3.18. -</a>Byte Range Locking</h2> +<h2><a name="_Toc115416124"></a><a name="_Toc139993108"></a><a +name="_Toc126872189"></a><a name="_Toc115417060"></a><span style='mso-bookmark: +_Toc115416124'>3.18. </span><st1:place w:st="on"><st1:PlaceName w:st="on">Byte</st1:PlaceName> + <st1:PlaceType w:st="on">Range</st1:PlaceType></st1:place> Locking</h2> <p class=MsoNormal>Many applications on Windows (e.g. Microsoft Office) require the use of byte range locks applied to a file either to protect against -simultaneous file access or as a signaling mechanism. OpenAFS for Windows -release 1.5 (or greater) implements byte range locking within the CIFS-AFS -gateway server. This support for byte range locking obtains <span -style='font-family:"Times New Roman"'>AFS’ advisory file server locks to simulate -Microsoft Windows mandatory locks.   When an application opens a -file, a lock will be obtained from AFS indicating that the file is in -use.  If the lock is a write lock, access to the file will be restricted -to other applications running on the same machine as the first application to -request the lock.   Applications running on other machines will see -the AFS full file lock and will be unable to access the file.</span></p> +simultaneous file access or as a signaling mechanism.   OpenAFS for +Windows release 1.5 (or greater) implements byte range locking within the +CIFS-AFS gateway server.   This support for byte range locking +obtains <span style='font-family:"Times New Roman"'>AFS’ advisory file server +locks to simulate Microsoft Windows mandatory locks.   When an +application opens a file, a lock will be obtained from AFS indicating that the +file is in use.  If the lock is a write lock, access to the file will be +restricted to other applications running on the same machine as the first +application to request the lock.   Applications running on other +machines will see the AFS full file lock and will be unable to access the file.</span></p> <p class=MsoNormal><span style='font-family:"Times New Roman"'>Most Windows applications and Windows itself opens files in shared read mode. When this is @@ -1077,407 +1308,456 @@ writes to the file while it is in use.</span></p> <p class=MsoNormal>As the CIFS-AFS gateway server attempts to implement Windows lock semantics on top of AFS lock semantics it is important to understand how -AFS file locks work. In Windows there are no special privileges associated -with obtaining file locks. If you can read or execute a file, then you can -obtain a read lock. If you can write or create a file, then you can obtain a -write lock. In AFS if you can write to a file, then you can obtain a write -lock. However, in AFS if you can read a file it does not mean that you can -obtain a read lock on it. The ability to obtain read locks is granted only if -you have the lock (or ‘k’) privilege. This behavior is required in order to -allow anonymous users to read files while preventing them from being able to -deny access to the files to other users. <i>OpenAFS 1.4.0 and earlier as well -as all IBM AFS file servers have an implementation bug that prevents users with -write privileges from being able to obtain locks without the lock privilege.</i> -When AFS serves data out of read-only volumes the file server will deny all -requests for read and write locks because the contents of the volume cannot be -changed by the client.</p> +AFS file locks work.  In Windows there are no special privileges +associated with obtaining file locks.  If you can read or execute a file, +then you can obtain a read lock.  If you can write or create a file, then +you can obtain a write lock.  In AFS if you can write to a file, then you +can obtain a write lock.  However, in AFS if you can read a file it does +not mean that you can obtain a read lock on it.   The ability to +obtain read locks is granted only if you have the lock (or ‘k’) +privilege.  This behavior is required in order to allow anonymous users to +read files while preventing them from being able to deny access to the files to +other users.  <i>OpenAFS 1.4.0 and earlier as well as all IBM AFS file +servers have an implementation bug that prevents users with write privileges +from being able to obtain locks without the lock privilege.</i>  When AFS +serves data out of read-only volumes the file server will deny all requests for +read and write locks because the contents of the volume cannot be changed by +the client.</p> <p class=MsoNormal>Since Microsoft Windows applications almost always attempt to obtain a temporary read lock when accessing files the CIFS-AFS gateway implements the following semantics in order to reduce the inconvenience on end -users. </p> +users.  </p> -<ul type=disc> - <li class=MsoNormal>If the file is located on a read-only volume and the - application requests a read lock, the CIFS-AFS server will grant the lock - request without asking the AFS file server.</li> - <li class=MsoNormal>If the file is located on a read-only volume and the - application requests a write lock, the CIFS-AFS server will refuse the - lock request and return a read only error.</li> - <li class=MsoNormal>If the file is located on a read-write volume and the - application requests a write lock, the CIFS-AFS server will request a lock - from the AFS file server. If granted by the file server, then the - CIFS-AFS server will grant the lock request. Otherwise, the request will - be denied either with an access denied or an in use error.</li> - <li class=MsoNormal>If the file is located on a read-write volume and the - application requests a read lock, the CIFS-AFS server will request a lock - from the AFS file server. If granted by the file server, then the - CIFS-AFS server grants the lock request. If the request is denied due to - an access denied error and the user has the lookup and read privileges but - not the lock privilege, then the CIFS-AFS server will grant the request - even though the AFS file server said ‘no’. If the user does not have at +<ul style='margin-top:0pt' type=disc> + <li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list 36.0pt'>If + the file is located on a read-only volume and the application requests a + read lock, the CIFS-AFS server will grant the lock request without asking + the AFS file server.</li> + <li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list 36.0pt'>If + the file is located on a read-only volume and the application requests a + write lock, the CIFS-AFS server will refuse the lock request and return a + read only error.</li> + <li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list 36.0pt'>If + the file is located on a read-write volume and the application requests a + write lock, the CIFS-AFS server will request a lock from the AFS file + server.  If granted by the file server, then the CIFS-AFS server will + grant the lock request.  Otherwise, the request will be denied either + with an access denied or an in use error.</li> + <li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list 36.0pt'>If + the file is located on a read-write volume and the application requests a + read lock, the CIFS-AFS server will request a lock from the AFS file + server.  If granted by the file server, then the CIFS-AFS server + grants the lock request.  If the request is denied due to an access + denied error and the user has the lookup and read privileges but not the + lock privilege, then the CIFS-AFS server will grant the request even + though the AFS file server said ‘no’.  If the user does not have at least those permissions, the CIFS-AFS server will deny the request.</li> - <li class=MsoNormal>If multiple processes on the same machine attempt to - access the same file simultaneously, the CIFS-AFS server will locally - manage the granted locks and all processes will share a single lock on the - AFS file server.</li> - <li class=MsoNormal>If the CIFS-AFS server is unable to renew the AFS file - server locks, then it will invalidate the associated file handles. This - is the same behavior that an application will experience if it was using a - Windows File Share and the connection was broken. Invalidating the file - handles prevents subsequent data corruption from taking place.</li> + <li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list 36.0pt'>If + multiple processes on the same machine attempt to access the same file + simultaneously, the CIFS-AFS server will locally manage the granted locks + and all processes will share a single lock on the AFS file server.</li> + <li class=MsoNormal style='mso-list:l0 level1 lfo1;tab-stops:list 36.0pt'>If + the CIFS-AFS server is unable to renew the AFS file server locks, then it + will invalidate the associated file handles.  This is the same + behavior that an application will experience if it was using a Windows + File Share and the connection was broken.   Invalidating the + file handles prevents subsequent data corruption from taking place.</li> </ul> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993109"></a><a -name="_Toc126872190"></a><a name="_Toc115417061"></a><a name="_Toc115416125">3.19. -Automatic Discarding of AFS Tokens at Logoff</a></h2> +<h2><a name="_Toc115416125"></a><a name="_Toc139993109"></a><a +name="_Toc126872190"></a><a name="_Toc115417061"></a><span style='mso-bookmark: +_Toc115416125'>3.19. Automatic Discarding of AFS Tokens at Logoff</span></h2> <p class=MsoNormal>OpenAFS 1.4 will automatically forget a user's tokens upon -Logoff unless the user's profile was loaded from an AFS volume. In this +Logoff unless the user's profile was loaded from an AFS volume.  In this situation there is no mechanism to determine when the profile has been -successfully written back to the network. It is therefore unsafe to release -the user's tokens. Whether or not the profile has been loaded from the -registry can be determined for Local Accounts, Active Directory accounts and -NT4 accounts.</p> +successfully written back to the network.  It is therefore unsafe to +release the user's tokens.  Whether or not the profile has been loaded +from the registry can be determined for Local Accounts, Active Directory +accounts and NT4 accounts.</p> <p class=MsoNormal>If there is a need to disable this functionality, the <a -href="#_Value_:_LogoffPreserveTokens">LogoffPreserveTokens</a> -registry value can be used. (see <a -href="#_Appendix_A:_Registry_Values">Appendix A</a>.)</p> +href="#_Value_:_LogoffPreserveTokens">LogoffPreserveTokens</a> registry value +can be used. (see <a href="#_Appendix_A:_Registry_Values">Appendix A</a>.)</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993110"></a><a -name="_Toc126872191"></a><a name="_Toc115417062"></a><a name="_Toc115416126">3.20. -Terminal Server installations</a></h2> +<h2><a name="_Toc115416126"></a><a name="_Toc139993110"></a><a +name="_Toc126872191"></a><a name="_Toc115417062"></a><span style='mso-bookmark: +_Toc115416126'>3.20. Terminal Server installations</span></h2> <p class=MsoNormal>When installing the NSIS (.exe) installer under Terminal -Server, you must execute it from within the Add/Remove Programs Control Panel. -Failure to do so will result in AFS not running properly. The AFS Server -should not be installed on a machine with Terminal Server installed.</p> +Server, you must execute it from within the Add/Remove Programs Control +Panel.  Failure to do so will result in AFS not running properly.  +The AFS Server should not be installed on a machine with Terminal Server +installed.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993111"></a><a -name="_Toc126872192"></a><a name="_Toc115417063"></a><a name="_Toc115416127">3.21. -Hidden Dot Files</a></h2> +<h2><a name="_Toc115416127"></a><a name="_Toc139993111"></a><a +name="_Toc126872192"></a><a name="_Toc115417063"></a><span style='mso-bookmark: +_Toc115416127'>3.21. Hidden Dot Files</span></h2> -<p class=MsoNormal>AFS is a UNIX native file system. The OpenAFS client -attempts to treat the files stored in AFS as they would be on UNIX. File and -directory names beginning with a "." are automatically given the Hidden -attribute so they will not normally be displayed.</p> +<p class=MsoNormal>AFS is a UNIX native file system.  The OpenAFS client +attempts to treat the files stored in AFS as they would be on UNIX.  File +and directory names beginning with a "." are automatically given the +Hidden attribute so they will not normally be displayed.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993112"></a><a -name="_Toc126872193"></a><a name="_Toc115417064"></a><a name="_Toc115416128">3.22. -Status Cache Limits</a></h2> +<h2><a name="_Toc115416128"></a><a name="_Toc139993112"></a><a +name="_Toc126872193"></a><a name="_Toc115417064"></a><span style='mso-bookmark: +_Toc115416128'>3.22. Status Cache Limits</span></h2> <p class=MsoNormal>The Status Cache (AFS Configuration Control Panel: Advanced -Page) is defined to have a maximum number of entries. Each entry represents a -single file or directory entry accessed within the AFS file system. When the -maximum number of entries are allocated, entries will begin to be reused -according to a least recently used (LRU) algorithm. If the number of files or -directories being accessed repeatedly by your applications is greater then the -maximum number of entries, your host will begin to experience thrashing of the -Status Cache and all requests will result in network operations.</p> +Page) is defined to have a maximum number of entries.  Each entry +represents a single file or directory entry accessed within the AFS file +system.  When the maximum number of entries are allocated, entries will +begin to be reused according to a least recently used (LRU) algorithm.  If +the number of files or directories being accessed repeatedly by your +applications is greater then the maximum number of entries, your host will +begin to experience thrashing of the Status Cache and all requests will result +in network operations.</p> <p class=MsoNormal>If you are experiencing poor performance try increasing the -maximum number of Status Cache entries. Each entry requires approximately -1.2K. In OpenAFS 1.4, the default number of Status Cache entries is 10,000.</p> +maximum number of Status Cache entries.  Each entry requires approximately +1.2K.  In OpenAFS 1.4, the default number of Status Cache entries is +10,000.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993113"></a><a -name="_Toc126872194"></a><a name="_Toc115417065"></a><a name="_Toc115416129">3.23. -NETBIOS over TCP/IP must be enabled</a></h2> +<h2><a name="_Toc115416129"></a><a name="_Toc139993113"></a><a +name="_Toc126872194"></a><a name="_Toc115417065"></a><span style='mso-bookmark: +_Toc115416129'>3.23. NETBIOS over TCP/IP must be enabled</span></h2> <p class=MsoNormal>"Netbios over TCP/IP" must be active on the -machine in order for communication with the AFS Client Service to succeed. If -"Netbios over TCP/IP" is disabled on the machine, then communication -with the AFS Client Service will be impossible.</p> +machine in order for communication with the AFS Client Service to +succeed.  If "Netbios over TCP/IP" is disabled on the machine, +then communication with the AFS Client Service will be impossible.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993114"></a><a -name="_Toc126872195"></a><a name="_Toc115417066"></a><a name="_Toc115416130">3.24. -OpenAFS binaries are digitally signed</a></h2> +<h2><a name="_Toc115416130"></a><a name="_Toc139993114"></a><a +name="_Toc126872195"></a><a name="_Toc115417066"></a><span style='mso-bookmark: +_Toc115416130'>3.24. OpenAFS binaries are digitally signed</span></h2> <p class=MsoNormal>The OpenAFS Client Service and related binaries distributed -by OpenAFS.org are digitally signed by "Secure Endpoints Inc.". The -OpenAFS Client Service will perform a run-time verification check to ensure +by OpenAFS.org are digitally signed by "Secure Endpoints Inc.".  +The OpenAFS Client Service will perform a run-time verification check to ensure that all OpenAFS related DLLs loaded by the service match the same file version -number and were signed by the same entity. This check has been added to +number and were signed by the same entity.  This check has been added to prevent the stability problems caused by more than one AFS installation present -on a machine at the same time. Many hours of support time have been wasted -tracking down problems caused by the mixture of files from different releases. -</p> +on a machine at the same time.  Many hours of support time have been +wasted tracking down problems caused by the mixture of files from different +releases.  </p> -<p class=MsoNormal><a -href="#_Appendix_A:_Registry_Values">Appendix A</a> -documents the "<a -href="#_Value___: VerifyServiceSignature">VerifyServiceSignature</a>" -registry value which can be used to disable the signature check. The file +<p class=MsoNormal><a href="#_Appendix_A:_Registry_Values">Appendix A</a> +documents the "<a href="#_Value___:_VerifyServiceSignature">VerifyServiceSignature</a>" +registry value which can be used to disable the signature check.  The file version check cannot be disabled.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993115"></a><a -name="_Toc126872196"></a><a name="_Toc115417067"></a><a name="_Toc115416131">3.25. -Maximum Size of the AFSCache File</a></h2> +<h2><a name="_Toc115416131"></a><a name="_Toc139993115"></a><a +name="_Toc126872196"></a><a name="_Toc115417067"></a><span style='mso-bookmark: +_Toc115416131'>3.25. Maximum Size of the AFSCache File</span></h2> -<p class=MsoNormal>The maximum cache size is approximately 1.3GB. This is the -largest contiguous block of memory in the 2GB process address space which can -be used for constructing a memory mapped file. Due to fragmentation of the -process space caused by the loading of libraries required by the digital +<p class=MsoNormal>The maximum cache size is approximately 1.3GB.  This is +the largest contiguous block of memory in the 2GB process address space which +can be used for constructing a memory mapped file.  Due to fragmentation +of the process space caused by the loading of libraries required by the digital signature verification code, any attempt to specify a cache size greater then 700MB will result in the automatic disabling of the signature check.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993116"></a><a -name="_Toc126872197"></a><a name="_Toc115417068"></a><a name="_Toc115416132">3.26. -Filename Character Sets</a></h2> +<h2><a name="_Toc115416132"></a><a name="_Toc139993116"></a><a +name="_Toc126872197"></a><a name="_Toc115417068"></a><span style='mso-bookmark: +_Toc115416132'>3.26. Filename Character Sets</span></h2> <p class=MsoNormal>OpenAFS for Windows implements an SMB server which is used -as a gateway to the AFS filesystem. Because of limitations of the SMB +as a gateway to the AFS filesystem.  Because of limitations of the SMB implementation, Windows stores all files into AFS using OEM code pages such as -CP437 (United States) or CP850 (Western Europe). These code pages are +CP437 (United States) or CP850 (Western Europe).  These code pages are incompatible with the ISO Latin-1 character set typically used as the default -on UNIX systems in both the United States and Western Europe. Filenames stored -by OpenAFS for Windows are therefore unreadable on UNIX systems if they include +on UNIX systems in both the <st1:country-region w:st="on">United States</st1:country-region> +and <st1:place w:st="on">Western Europe</st1:place>.  Filenames stored by +OpenAFS for Windows are therefore unreadable on UNIX systems if they include any of the following characters:</p> -<table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 - style='border-collapse:collapse;border:none'> - <tr style='height:399.5pt'> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 + style='border-collapse:collapse;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:399.5pt'> <td width=590 valign=top style='width:442.8pt;border:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt;height:399.5pt'> - <p class=PreformattedText> [Ç] 128 08/00 200 80 C cedilla</p> - <p class=PreformattedText> [ü] 129 08/01 201 81 u diaeresis</p> - <p class=PreformattedText> [é] 130 08/02 202 82 e acute</p> - <p class=PreformattedText> [â] 131 08/03 203 83 a circumflex</p> - <p class=PreformattedText> [ä] 132 08/04 204 84 a diaeresis</p> - <p class=PreformattedText> [à] 133 08/05 205 85 a grave</p> - <p class=PreformattedText> [å] 134 08/06 206 86 a ring</p> - <p class=PreformattedText> [ç] 135 08/07 207 87 c cedilla</p> - <p class=PreformattedText> [ê] 136 08/08 210 88 e circumflex</p> - <p class=PreformattedText> [ë] 137 08/09 211 89 e diaeresis</p> - <p class=PreformattedText> [è] 138 08/10 212 8A e grave</p> - <p class=PreformattedText> [ï] 139 08/11 213 8B i diaeresis</p> - <p class=PreformattedText> [î] 140 08/12 214 8C i circumflex</p> - <p class=PreformattedText> [ì] 141 08/13 215 8D i grave</p> - <p class=PreformattedText> [Ä] 142 08/14 216 8E A diaeresis</p> - <p class=PreformattedText> [Å] 143 08/15 217 8F A ring</p> - <p class=PreformattedText> [É] 144 09/00 220 90 E acute</p> - <p class=PreformattedText> [æ] 145 09/01 221 91 ae diphthong</p> - <p class=PreformattedText> [Æ] 146 09/02 222 92 AE diphthong</p> - <p class=PreformattedText> [ô] 147 09/03 223 93 o circumflex</p> - <p class=PreformattedText> [ö] 148 09/04 224 94 o diaeresis</p> - <p class=PreformattedText> [ò] 149 09/05 225 95 o grave</p> - <p class=PreformattedText> [û] 150 09/06 226 96 u circumflex</p> - <p class=PreformattedText> [ù] 151 09/07 227 97 u grave</p> - <p class=PreformattedText> [ÿ] 152 09/08 230 98 y diaeresis</p> - <p class=PreformattedText> [Ö] 153 09/09 231 99 O diaeresis</p> - <p class=PreformattedText> [Ü] 154 09/10 232 9A U diaeresis</p> - <p class=PreformattedText> [ø] 155 09/11 233 9B o slash</p> - <p class=PreformattedText> [£] 156 09/12 234 9C Pound sterling sign</p> - <p class=PreformattedText> [Ø] 157 09/13 235 9D O slash</p> - <p class=PreformattedText> [×] 158 09/14 236 9E Multiplication sign</p> - <p class=PreformattedText> [ƒ] 159 09/15 237 9F Florin sign</p> + <p class=preformattedtext>     [Ç]  128  + 08/00  200  80  C cedilla</p> + <p class=preformattedtext>     [ü]  129  + 08/01  201  81  u diaeresis</p> + <p class=preformattedtext>     [é]  130  + 08/02  202  82  e acute</p> + <p class=preformattedtext>     [â]  131  + 08/03  203  83  a circumflex</p> + <p class=preformattedtext>     [ä]  132  + 08/04  204  84  a diaeresis</p> + <p class=preformattedtext>     [à]  133  + 08/05  205  85  a grave</p> + <p class=preformattedtext>     [å]  134  + 08/06  206  86  a ring</p> + <p class=preformattedtext>     [ç]  135  + 08/07  207  87  c cedilla</p> + <p class=preformattedtext>     [ê]  136  + 08/08  210  88  e circumflex</p> + <p class=preformattedtext>     [ë]  137  + 08/09  211  89  e diaeresis</p> + <p class=preformattedtext>     [è]  138  + 08/10  212  8A  e grave</p> + <p class=preformattedtext>     [ï]  139  + 08/11  213  8B  i diaeresis</p> + <p class=preformattedtext>     [î]  140  + 08/12  214  8C  i circumflex</p> + <p class=preformattedtext>     [ì]  141  + 08/13  215  8D  i grave</p> + <p class=preformattedtext>     [Ä]  142  + 08/14  216  8E  A diaeresis</p> + <p class=preformattedtext>     [Å]  143  + 08/15  217  8F  A ring</p> + <p class=preformattedtext>     [É]  144  + 09/00  220  90  E acute</p> + <p class=preformattedtext>     [æ]  145  + 09/01  221  91  ae diphthong</p> + <p class=preformattedtext>     [Æ]  146  09/02  + 222  92  AE diphthong</p> + <p class=preformattedtext>     [ô]  147  + 09/03  223  93  o circumflex</p> + <p class=preformattedtext>     [ö]  148  + 09/04  224  94  o diaeresis</p> + <p class=preformattedtext>     [ò]  149  + 09/05  225  95  o grave</p> + <p class=preformattedtext>     [û]  150  + 09/06  226  96  u circumflex</p> + <p class=preformattedtext>     [ù]  151  + 09/07  227  97  u grave</p> + <p class=preformattedtext>     [ÿ]  152  09/08  + 230  98  y diaeresis</p> + <p class=preformattedtext>     [Ö]  153  + 09/09  231  99  O diaeresis</p> + <p class=preformattedtext>     [Ü]  154  + 09/10  232  9A  U diaeresis</p> + <p class=preformattedtext>     [ø]  155  + 09/11  233  9B  o slash</p> + <p class=preformattedtext>     [£]  156  + 09/12  234  9C  Pound sterling sign</p> + <p class=preformattedtext>     [Ø]  157  + 09/13  235  9D  O slash</p> + <p class=preformattedtext>     [×]  158  + 09/14  236  9E  Multiplication sign</p> + <p class=preformattedtext>     [ƒ]  159  + 09/15  237  9F  <st1:place w:st="on">Florin</st1:place> sign</p> </td> </tr> </table> -<p class=PreformattedText> </p> +<p class=preformattedtext> </p> <p class=MsoNormal>OpenAFS 1.4 provides an optional registry value, <i><a -href="#_Value___: StoreAnsiFilenames">StoreAnsiFilenames</a></i>, -that can be set to instruct OpenAFS to store filenames using the ANSI Code Page -instead of the OEM Code Page. The ANSI Code Page is a compatible superset of -Latin-1. This setting is not the default setting because making this change -would prevent OpenAFS for Windows from being able to access filenames +href="#_Value___:_StoreAnsiFilenames">StoreAnsiFilenames</a></i>, that can be +set to instruct OpenAFS to store filenames using the ANSI Code Page instead of +the OEM Code Page.  The ANSI Code Page is a compatible superset of +Latin-1.  This setting is not the default setting because making this +change would prevent OpenAFS for Windows from being able to access filenames containing the above characters which were created without this setting.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993117"></a><a -name="_Toc126872198"></a><a name="_Toc115417069"></a><a name="_Toc115416133">3.27. -Known Character Set Issues with Roaming Profiles</a></h2> +<h2><a name="_Toc115416133"></a><a name="_Toc139993117"></a><a +name="_Toc126872198"></a><a name="_Toc115417069"></a><span style='mso-bookmark: +_Toc115416133'>3.27. Known Character Set Issues with Roaming Profiles</span></h2> <p class=MsoNormal>There is a known issue with storing Windows Roaming Profiles when the profile contains either directories or files with names which cannot -be represented in the local OEM character set. In this case, attempts to write -the profile back to AFS will fail. OpenAFS for Windows does not currently -support UNICODE. To avoid this problem some sites run logoff scripts (assigned -by group policy) which rename all files to use only the supported characters -for the locale.</p> +be represented in the local OEM character set.  In this case, attempts to +write the profile back to AFS will fail.  OpenAFS for Windows does not +currently support UNICODE.  To avoid this problem some sites run logoff scripts +(assigned by group policy) which rename all files to use only the supported +characters for the locale.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993118"></a><a -name="_Toc126872199"></a><a name="_Toc115417070"></a><a name="_Toc115416134">3.28. -The AFSCache File</a></h2> +<h2><a name="_Toc115416134"></a><a name="_Toc139993118"></a><a +name="_Toc126872199"></a><a name="_Toc115417070"></a><span style='mso-bookmark: +_Toc115416134'>3.28. The AFSCache File</span></h2> <p class=MsoNormal>The AFS Cache file is stored by default at %TEMP%\AFSCache -in a persistent file marked with the Hidden and System attributes. The +in a persistent file marked with the Hidden and System attributes.  The persistent nature of the data stored in the cache file improves the performance of OpenAFS by reducing the number of times data must be read from the AFS file -servers. </p> +servers.  </p> <p class=MsoNormal>The performance of the AFS Client Service is significantly -affected by the access times associated with the AFSCache paging file. When -given the choice, the AFSCache file should be placed on a fast disk, preferably -NTFS, the file should not be compressed and should consist of as few fragments -as possible. Significant performance gains can be achieved by defragmenting -the AFSCache file with Sysinternal's Contig utility.</p> +affected by the access times associated with the AFSCache paging +file.   When given the choice, the AFSCache file should be placed on +a fast disk, preferably NTFS, the file should not be compressed and should +consist of as few fragments as possible.   Significant performance +gains can be achieved by defragmenting the AFSCache file with Sysinternal's +Contig utility.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993119"></a><a -name="_Toc126872200"></a><a name="_Toc115417071"></a><a name="_Toc115416135">3.29. -Restricting OpenAFS Client Service Start and Stop</a></h2> +<h2><a name="_Toc115416135"></a><a name="_Toc139993119"></a><a +name="_Toc126872200"></a><a name="_Toc115417071"></a><span style='mso-bookmark: +_Toc115416135'>3.29. Restricting OpenAFS Client Service Start and Stop</span></h2> <p class=MsoNormal>A new command line tool, afsdacl.exe, can be used to restrict the ability to start and stop the OpenAFS Client Service.</p> -<p class=PreformattedText> afsdacl : Set or reset the DACL to allow starting -or stopping</p> +<p class=preformattedtext>    afsdacl : Set or reset the DACL to +allow starting or stopping</p> -<p class=PreformattedText> the afsd service by any ordinary user.</p> +<p class=preformattedtext>         the +afsd service by any ordinary user.</p> -<p class=PreformattedText> </p> +<p class=preformattedtext> </p> -<p class=PreformattedText> Usage : afsdacl [-set | -reset] [-show]</p> +<p class=preformattedtext>    Usage : afsdacl [-set | -reset] +[-show]</p> -<p class=PreformattedText> -set : Sets the DACL</p> +<p class=preformattedtext>          +-set   : Sets the DACL</p> -<p class=PreformattedText> -reset : Reset the DACL</p> +<p class=preformattedtext>          +-reset : Reset the DACL</p> -<p class=PreformattedText> -show : Show current DACL (SDSF)</p> +<p class=preformattedtext>        +  -show  : Show current DACL (SDSF)</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993120"></a><a -name="_Toc126872201"></a><a name="_Toc115417072"></a><a name="_Toc115416136">3.30. -The @sys Name List</a></h2> +<h2><a name="_Toc115416136"></a><a name="_Toc139993120"></a><a +name="_Toc126872201"></a><a name="_Toc115417072"></a><span style='mso-bookmark: +_Toc115416136'>3.30. The @sys Name List</span></h2> <p class=MsoNormal>The default @sys name list in OpenAFS 1.4 is set to -"x86_win32 i386_w2k i386_nt40" for 32-bit x86 systems. The default -for itanium will be "ia64_win64" and "amd64_win64" for amd -64-bit processors when those platforms are supported.</p> +"x86_win32 i386_w2k i386_nt40" for 32-bit x86 systems.  The +default for itanium will be "ia64_win64" and "amd64_win64" +for amd 64-bit processors when those platforms are supported.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993121"></a><a -name="_Toc126872202"></a><a name="_Toc115417073"></a><a name="_Toc115416137">3.31. -Symlinks to AFS UNC paths</a></h2> +<h2><a name="_Toc115416137"></a><a name="_Toc139993121"></a><a +name="_Toc126872202"></a><a name="_Toc115417073"></a><span style='mso-bookmark: +_Toc115416137'>3.31. Symlinks to AFS UNC paths</span></h2> <p class=MsoNormal>In OpenAFS 1.4, symlinks to AFS UNC paths, \\AFS[\all]\..., -are treated the same as symlinks to /afs/... However, please use /afs/... as -the Windows UNC form will not work on UNIX.</p> +are treated the same as symlinks to /afs/...  However, please use /afs/... +as the Windows UNC form will not work on UNIX.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993122"></a><a -name="_Toc126872203"></a><a name="_Toc115417074"></a><a name="_Toc115416138">3.32. -Cache Manager Debugging Now Supported</a></h2> +<h2><a name="_Toc115416138"></a><a name="_Toc139993122"></a><a +name="_Toc126872203"></a><a name="_Toc115417074"></a><span style='mso-bookmark: +_Toc115416138'>3.32. Cache Manager Debugging Now Supported</span></h2> <p class=MsoNormal>OpenAFS for Windows 1.4 implements the Cache Manager -Debugging RPC Interface. The CM debugger can be queried with cmdebug.exe.</p> +Debugging RPC Interface.  The CM debugger can be queried with cmdebug.exe.</p> -<p class=PreformattedText>Usage: cmdebug -servers <server machine> [-port +<p class=preformattedtext>Usage: cmdebug -servers <server machine> [-port <IP port>] [-long]</p> -<p class=PreformattedText> [-addrs] [-cache] [-help]</p> +<p class=preformattedtext>               +[-addrs] [-cache] [-help]</p> -<p class=PreformattedText>Where: -long print all info</p> +<p class=preformattedtext>Where: -long   print all info</p> -<p class=PreformattedText> -addrs print only host interfaces</p> +<p class=preformattedtext>       -addrs  +print only host interfaces</p> -<p class=PreformattedText> -cache print only cache configuration</p> +<p class=preformattedtext>       -cache  +print only cache configuration</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993123"></a><a -name="_Toc126872204"></a><a name="_Toc115417075"></a><a name="_Toc115416139">3.33. -Windows Logon Caching vs. Kerberos Logons</a></h2> +<h2><a name="_Toc115416139"></a><a name="_Toc139993123"></a><a +name="_Toc126872204"></a><a name="_Toc115417075"></a><span style='mso-bookmark: +_Toc115416139'>3.33. Windows Logon Caching vs. Kerberos Logons</span></h2> <p class=MsoNormal>If you are a site which utilizes MIT/Heimdal Kerberos principals to logon to Windows via a cross-realm relationship with a multi-domain Windows forest, you must enable Windows logon caching unless the -workstation is Windows Vista Beta 2 or later.</p> +workstation is Windows Vista RC2 or later.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993124"></a><a -name="_Toc126872205"></a><a name="_Toc115417076"></a><a name="_Toc115416140">3.34. -Initial Server Preferences</a></h2> +<h2><a name="_Toc115416140"></a><a name="_Toc139993124"></a><a +name="_Toc126872205"></a><a name="_Toc115417076"></a><span style='mso-bookmark: +_Toc115416140'>3.34. Initial Server Preferences</span></h2> <p class=MsoNormal>VLDB and File Server Preferences can now be provided initial -values using registry keys. This is useful for managed machines in a Windows -domain which are centrally located (e.g., in a computing lab.) See <a -href="#_Appendix_A:_Registry_Values">Appendix A</a> -for details on the "<a -href="#_Regkey:_[HKLMSOFTWAREOpenAFSClie_2">Server -Preferences</a>" keys.</p> +values using registry keys.  This is useful for managed machines in a +Windows domain which are centrally located (e.g., in a computing lab.)  +See <a href="#_Appendix_A:_Registry_Values">Appendix A</a> for details on the +"<a href="#_Regkey:_[HKLMSOFTWAREOpenAFSClie_2">Server Preferences</a>" +keys.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993125"></a><a -name="_Toc126872206"></a><a name="_Toc115417077"></a><a name="_Toc115416141">3.35. -File Timestamps</a></h2> +<h2><a name="_Toc115416141"></a><a name="_Toc139993125"></a><a +name="_Toc126872206"></a><a name="_Toc115417077"></a><span style='mso-bookmark: +_Toc115416141'>3.35. File Timestamps</span></h2> <p class=MsoNormal>OpenAFS 1.4 reports timestamps on files stored in AFS in UTC -all year round. In locales with daylight savings time, previous versions of -AFS for Windows reported the time when DST is active as UTC+1. This was done -to preserve the relative local time for the user. A file stored at 11:00am EST -in January would be reported as having been stored at 11:00am EDT in June. -Unfortunately, this has the negative side effect of changing the reported -timestamp from 16:00UTC to 15:00UTC. Since Windows treats all file times in -UTC, data synchronization applications which rely on the timestamp would -believe that all files stored in AFS had changed.</p> +all year round.  In locales with daylight savings time, previous versions +of AFS for Windows reported the time when DST is active as UTC+1.  This +was done to preserve the relative local time for the user.  A file stored +at 11:00am EST in January would be reported as having been stored at 11:00am +EDT in June.  Unfortunately, this has the negative side effect of changing +the reported timestamp from 16:00UTC to 15:00UTC.  Since Windows treats +all file times in UTC, data synchronization applications which rely on the +timestamp would believe that all files stored in AFS had changed.</p> <p class=MsoNormal>It should be noted that UNIX based operating systems (such -as Solaris) do not appear to report file times to applications in UTC. They do -preserve the relative local time. This may confuse some users who are used to -being able to compare the timestamp in an UNIX shell with the timestamp from -the Windows explorer. During DST, these two times will no longer agree even -though they are in fact representing the same moment in time.</p> +as Solaris) do not appear to report file times to applications in UTC.  +They do preserve the relative local time.  This may confuse some users who +are used to being able to compare the timestamp in an UNIX shell with the +timestamp from the Windows explorer.  During DST, these two times will no +longer agree even though they are in fact representing the same moment in time.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993126"></a><a -name="_Toc126872207"></a><a name="_Toc115417078"></a><a name="_Toc115416142">3.36. -Windows RPC client support must be installed</a> </h2> +<h2><a name="_Toc115416142"></a><a name="_Toc139993126"></a><a +name="_Toc126872207"></a><a name="_Toc115417078"></a><span style='mso-bookmark: +_Toc115416142'>3.36. Windows RPC client support must be installed</span> </h2> <p class=MsoNormal>If the installer refuses to install and complains about an RPC configuration error, check to ensure that the following registry entries are present and that they refer to the dll "rpcrt4.dll":</p> -<p class=PreformattedText> HKLM +<p class=preformattedtext>   HKLM "SOFTWARE\Microsoft\RPC\ClientProtocols" "ncacn_np"</p> -<p class=PreformattedText> HKLM +<p class=preformattedtext>   HKLM "SOFTWARE\Microsoft\RPC\ClientProtocols" "ncacn_ip_tcp"</p> -<p class=PreformattedText> HKLM +<p class=preformattedtext>   HKLM "SOFTWARE\Microsoft\RPC\ClientProtocols" "ncadg_ip_udp"</p> -<p class=PreformattedText> HKLM +<p class=preformattedtext>   HKLM "SOFTWARE\Microsoft\RPC\ClientProtocols" "ncacn_http"</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993127"></a><a -name="_Toc126872208"></a><a name="_Toc115417079"></a><a name="_Toc115416143">3.37. -Generating Minidumps of the OpenAFS Client Service</a></h2> +<h2><a name="_Toc115416143"></a><a name="_Toc139993127"></a><a +name="_Toc126872208"></a><a name="_Toc115417079"></a><span style='mso-bookmark: +_Toc115416143'>3.37. Generating Minidumps of the OpenAFS Client Service</span></h2> -<p class=MsoNormal>OpenAFS 1.4 adds a new command, "fs minidump". -This command can be used at any time to generate a mini dump file containing -the current stack of the afsd_service.exe process. This output can be very -helpful when debugging the AFS Client Service when it is unresponsive to -SMB/CIFS requests.</p> +<p class=MsoNormal>OpenAFS 1.4 adds a new command, "fs +minidump".  This command can be used at any time to generate a mini +dump file containing the current stack of the afsd_service.exe +process.   This output can be very helpful when debugging the AFS +Client Service when it is unresponsive to SMB/CIFS requests.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993128"></a><a -name="_Toc126872209"></a><a name="_Toc115417080"></a><a name="_Toc115416144">3.38. -AFS Client Universally Unique Identifiers</a></h2> +<h2><a name="_Toc115416144"></a><a name="_Toc139993128"></a><a +name="_Toc126872209"></a><a name="_Toc115417080"></a><span style='mso-bookmark: +_Toc115416144'>3.38. AFS Client Universally Unique Identifiers</span></h2> <p class=MsoNormal>The OpenAFS for Windows 1.4 client implements Universally -Unique Identifiers (UUIDs). They are used to provide the server with a method -of identifying the client that is independent of IP address. The UUID is -generated when the AFSCache file is created and is maintained as long as the -contents of the AFSCache file are kept intact. The UUID is stored in the -AFSCache file. When cloning machines that have Windows AFS client installed, -the AFSCache files should be deleted as part of the cloning process.</p> +Unique Identifiers (UUIDs).  They are used to provide the server with a +method of identifying the client that is independent of IP address.  The +UUID is generated when the AFSCache file is created and is maintained as long +as the contents of the AFSCache file are kept intact.  The UUID is stored +in the AFSCache file.   When cloning machines that have Windows AFS +client installed, the AFSCache files should be deleted as part of the cloning +process.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993129">3.39. -Delayed Write Errors with Microsoft Office Applications</a></h2> +<h2><a name="_Toc139993129">3.39. Delayed Write Errors with Microsoft Office +Applications</a></h2> <p class=MsoBodyText>Microsoft Office makes heavy use of asynchronous -input/output methods for reading and writing to file streams. This can result -in hundreds of requests being simultaneously queued for service by the CIFS -client with a fixed timeout period. As the AFS CIFS server is local to the -machine the Windows CIFS client believes that it can respond almost +input/output methods for reading and writing to file streams.  This can +result in hundreds of requests being simultaneously queued for service by the +CIFS client with a fixed timeout period.  As the AFS CIFS server is local +to the machine the Windows CIFS client believes that it can respond almost instantaneously to write requests as the actual writing to the AFS file server -is performed by a background daemon thread. When the actual network bandwidth -to the AFS file server is slow and the file size is large it is possible for -the CIFS client to time out the connection. When this happens a “delayed write -error” will be reported to the user and the application may crash. The only -workaround at the current time is to save first to a local disk and -subsequently copy the file to AFS as copying a file with the explorer shell -does not use asynchronous i/o.</p> +is performed by a background daemon thread.  When the actual network +bandwidth to the AFS file server is slow and the file size is large it is +possible for the CIFS client to time out the connection.  When this +happens a “delayed write error” will be reported to the user and the +application may crash.  The only workaround at the current time is to save +first to a local disk and subsequently copy the file to AFS as copying a file +with the explorer shell does not use asynchronous i/o. </p> <p class=MsoBodyText>The CIFS session timeout defaults to 45 seconds and can be increased by modifying the <a href="../relnotes.htm#_Value:_ConnDeadTimeout">registry</a>.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993130">3.40. -Global Drives (aka </a>Service Drive Letters) are no longer supported by -Microsoft</h2> +<h2><a name="_Toc139993130">3.40. Global Drives (aka </a><st1:Street w:st="on"><st1:address + w:st="on">Service Drive</st1:address></st1:Street> Letters) are no longer +supported by Microsoft</h2> <p class=MsoBodyText>The Global DriveAuto-mount feature has been deprecated due to the following Microsoft KB article.</p> @@ -1486,354 +1766,396 @@ to the following Microsoft KB article.</p> href="http://msdn.microsoft.com/library/en-us/dllproc/base/services_and_redirected_drives.asp">http://msdn.microsoft.com/library/en-us/dllproc/base/services_and_redirected_drives.asp</a></p> <p class=MsoBodyText>It says that services mounting drive letters are no longer -supported by Microsoft and may act unpredictably. The experience other users -have had is that if the connection to the OpenAFS CIFS/SMB server is terminated -by the Windows CIFS client, the drive mapping may not be re-established until -the machine is rebooted.</p> +supported by Microsoft and may act unpredictably.  The experience other +users have had is that if the connection to the OpenAFS CIFS/SMB server is +terminated by the Windows CIFS client, the drive mapping may not be +re-established until the machine is rebooted.</p> <p class=MsoBodyText>OpenAFS supports UNC paths and whenever possible applications should be modified to use of \\AFS\<cellname>\<path> instead of drive letters.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993131">3.41. -64-bit Microsoft Windows Installations</a></h2> +<h2><a name="_Toc139993131">3.41. 64-bit Microsoft Windows Installations</a></h2> <p class=MsoBodyText>Although 64-bit Windows platforms support both 64-bit and -32-bit applications, the OpenAFS Service installed on the machine must be 64-bit. -The 64-bit installer contains only 64-bit executables. In order to support -32-bit applications that link against OpenAFS libraries it is required that a -separate 32-bit OpenAFS Tools set be installed.</p> +32-bit applications, the OpenAFS Service installed on the machine must be +64-bit.  The 64-bit installer contains only 64-bit executables.  In +order to support 32-bit applications that link against OpenAFS libraries it is +required that a separate 32-bit OpenAFS Tools set be installed.</p> <p class=MsoBodyText>OpenAFS on 64-bit Windows benefits from the lifting of the -2GB process memory restriction that is present on 32-bit Windows. Without -this restriction the AFS Cache File can become arbitrarily large limited only -by available disk space.</p> +2GB process memory restriction that is present on 32-bit Windows.   +Without this restriction the AFS Cache File can become arbitrarily large +limited only by available disk space.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993132">3.42. Known -Issues with Microsoft Windows </a>Vista</h2> +<h2><a name="_Toc139993132">3.42. Known Issues with Microsoft Windows </a><st1:place +w:st="on">Vista</st1:place></h2> -<p class=MsoBodyText>OpenAFS for Windows is known to work with Vista and Longhorn Server Beta 2 from the command prompt. There are still issues with the -Explorer Shell that Secure Endpoints Inc. and Microsoft are working to resolve.</p> +<p class=MsoBodyText>OpenAFS for Windows works with Microsoft Windows Vista RC2 +(Build 5744) and Longhorn Server (Build 5744) from both the command prompt and +the Explorer Shell.<span style='mso-spacerun:yes'> </span>When performing an +upgrade from earlier versions of Microsoft Windows the Microsoft Loopback +Adapter (MSLA) will be uninstalled.<span style='mso-spacerun:yes'> </span><span +style='mso-spacerun:yes'> </span>OpenAFS should be re-installed after the +Microsoft Vista installation to restore the MSLA configuration.</p> -<p class=MsoBodyText> </p> +<p class=MsoBodyText>Under the new Windows Vista security model, users are +required to start applications under a new “administrative session” whenever +privileged operations must be performed.<span style='mso-spacerun:yes'> +</span>AFS tokens obtained during the regular session are not available to +users in the “administrative session”.<span style='mso-spacerun:yes'> </span>The +“administrative session” is the equivalent of a second user logging into the +machine. </p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993133"></a><a -name="_Toc126872210"></a><a name="_Toc115417112"></a><a name="_Toc115417081"></a><a -name="_Toc115416145">4. How to Debug Problems with OpenAFS for Windows:</a></h1> +<h1><a name="_Toc115416145"></a><a name="_Toc139993133"></a><a +name="_Toc126872210"></a><a name="_Toc115417112"></a><a name="_Toc115417081"></a><span +style='mso-bookmark:_Toc115416145'>4. How to Debug Problems with OpenAFS for +Windows:</span></h1> <p class=MsoNormal>OpenAFS for Windows provides a wide range of tools to assist -you in debugging problems. The techniques available to you are varied because -of the wide range of issues that have been discovered over the years.</p> +you in debugging problems.  The techniques available to you are varied +because of the wide range of issues that have been discovered over the years.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993134"></a><a -name="_Toc126872211"></a><a name="_Toc115417082"></a><a name="_Toc115416146">4.1. -pioctl debugging (</a><a -href="#_Value___: IoctlDebug">IoctlDebug</a> +<h2><a name="_Toc115416146"></a><a name="_Toc139993134"></a><a +name="_Toc126872211"></a><a name="_Toc115417082"></a><span style='mso-bookmark: +_Toc115416146'>4.1. pioctl debugging (</span><a href="#_Value___:_IoctlDebug">IoctlDebug</a> registry key)</h2> <p class=MsoNormal>pioctl (path-based ioctl) calls are used by various tools to -communicate with the AFS Client Service. Some of the operations performed +communicate with the AFS Client Service.  Some of the operations performed include:</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setting/querying tokens (tokens.exe, aklog.exe, afscreds.exe)</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setting/querying +tokens  (tokens.exe, aklog.exe, afscreds.exe)</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setting/querying ACLs </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setting/querying +ACLs </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setting/querying cache parameters</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setting/querying +cache parameters</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>flushing files or volumes</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>flushing +files or volumes</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setting/querying server preferences</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setting/querying +server preferences</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>querying path location</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>querying +path location</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>checking the status of servers and volumes</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>checking +the status of servers and volumes</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>setting/querying the sysname list</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>setting/querying +the sysname list</p> <p class=MsoNormal>pioctl calls are implemented by writing to a special UNC -path that is processed by the AFS Client Service. If there is a failure to -communicate with the AFS Client Service via SMB/CIFS, it will be impossible to -perform any of the above operations. </p> +path that is processed by the AFS Client Service.   If there is a +failure to communicate with the AFS Client Service via SMB/CIFS, it will be +impossible to perform any of the above operations.   </p> <p class=MsoNormal>To assist in debugging these problems, the registry value:</p> -<p class=PreformattedText> [HKLM\SOFTWARE\OpenAFS\Client]</p> +<p class=preformattedtext>  [HKLM\SOFTWARE\OpenAFS\Client]</p> -<p class=PreformattedText> REG_DWORD: IoctlDebug = 0x01</p> +<p class=preformattedtext>  REG_DWORD:  IoctlDebug   = 0x01</p> -<p class=MsoNormal>should be set. Then any of the commands that perform pioctl -calls should be executed from the command prompt. With this key set the pioctl -library will generate debugging output to stderr. The output will contain the -Win32 API calls executed along with their most important parameters and their -return code. The MSDN Library and the Microsoft KnowledgeBase can be used as -a reference to help you determine the configuration probem with your system.</p> +<p class=MsoNormal>should be set.  Then any of the commands that perform +pioctl calls should be executed from the command prompt.  With this key +set the pioctl library will generate debugging output to stderr.  The +output will contain the Win32 API calls executed along with their most +important parameters and their return code.   The MSDN Library and +the Microsoft KnowledgeBase can be used as a reference to help you determine +the configuration probem with your system.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993135"></a><a -name="_Toc126872212"></a><a name="_Toc115417083"></a><a name="_Toc115416147">4.2. -afsd_service initialization log (%WinDir%\TEMP\afsd_init.log)</a></h2> +<h2><a name="_Toc115416147"></a><a name="_Toc139993135"></a><a +name="_Toc126872212"></a><a name="_Toc115417083"></a><span style='mso-bookmark: +_Toc115416147'>4.2. afsd_service initialization log +(%WinDir%\TEMP\afsd_init.log)</span></h2> <p class=MsoNormal>Every time the AFS Client Service starts it appends data -about its progress and configuration to a file. This file provides information -crucial to determining why the service cannot start when there are problems. -When the process terminates due to a panic condition it will write to this file -the source code file and line number of the error. In many cases the panic -condition is due to a misconfiguration of the machine. In other cases it might -be due to a programming error in the software. A quick review of the location -in the source code will quickly reveal the reason for the termination.</p> +about its progress and configuration to a file.  This file provides +information crucial to determining why the service cannot start when there are +problems.  When the process terminates due to a panic condition it will +write to this file the source code file and line number of the error.  In +many cases the panic condition is due to a misconfiguration of the +machine.  In other cases it might be due to a programming error in the +software.  A quick review of the location in the source code will quickly +reveal the reason for the termination.</p> -<p class=MsoNormal>The <i><a -href="#_Value___: MaxLogSize">MaxLogSize</a></i> +<p class=MsoNormal>The <i><a href="#_Value___:_MaxLogSize">MaxLogSize</a></i> registry value determines the maximum size of the %WINDIR%\TEMP\afsd_init.log -file. If the file is larger than this value when OpenAFS Client Service -starts, the file will be reset to 0 bytes. If value is set to 0, the file will -be allowed to grow indefinitely.</p> +file.  If the file is larger than this value when OpenAFS Client Service +starts, the file will be reset to 0 bytes.  If value is set to 0, the file +will be allowed to grow indefinitely.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993136"></a><a -name="_Toc126872213"></a><a name="_Toc115417084"></a><a name="_Toc115416148">4.3. -afsd_service debug logs (fs trace {-on, -off, -dump} -->%WinDir%\TEMP\afsd.log)</a></h2> +<h2><a name="_Toc115416148"></a><a name="_Toc139993136"></a><a +name="_Toc126872213"></a><a name="_Toc115417084"></a><span style='mso-bookmark: +_Toc115416148'>4.3. afsd_service debug logs (fs trace {-on, -off, -dump} +->%WinDir%\TEMP\afsd.log)</span></h2> <p class=MsoNormal>When attempting to debug the behavior of the SMB/CIFS Server and the Cache Manager it is often useful to examine a log of the operations -being performed. While running the AFS Client Service keeps an in memory log -of many of its actions. The default number of actions preserved at any one -time is 5000. This can be adjusted with the <a +being performed.  While running the AFS Client Service keeps an in memory +log of many of its actions.   The default number of actions preserved +at any one time is 5000.  This can be adjusted with the <a href="#_Value_:_TraceBufferSize">registry value</a>:</p> -<p class=PreformattedText> +<p class=preformattedtext>  [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p> -<p class=PreformattedText> REG_DWORD TraceBufferSize </p> +<p class=preformattedtext>  REG_DWORD  TraceBufferSize </p> <p class=MsoNormal>A restart of the service is necessary when adjusting this -value. Execute "fs trace -on" to clear to the log and "fs -trace -dump" to output the contents of the log to the file.</p> +value.   Execute "fs trace -on" to clear to the log and +"fs trace -dump" to output the contents of the log to the file.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993137"></a><a -name="_Toc126872214"></a><a name="_Toc115417085"></a><a name="_Toc115416149">4.4. -Using SysInternal’s DbgView and FileMon Tools</a></h2> +<h2><a name="_Toc115416149"></a><a name="_Toc139993137"></a><a +name="_Toc126872214"></a><a name="_Toc115417085"></a><span style='mso-bookmark: +_Toc115416149'>4.4. Using SysInternal’s DbgView and FileMon Tools</span></h2> -<p class=MsoNormal>An alternatve option to the use of "fs trace -dump" -to capture internal OpenAFS Client Service events is to use a tool such as -Sysinternal's DbgView to capture real-time debugging output. When the OpenAFS -Client Service starts and Bit 2 of the <a -href="#_Value__:_TraceOption">TraceOption</a> -value in the registry is set, all trace log events are output using the Windows -Debug Monitor interface (OutputDebugString). </p> +<p class=MsoNormal>An alternatve option to the use of "fs trace +-dump" to capture internal OpenAFS Client Service events is to use a tool +such as Sysinternal's DbgView to capture real-time debugging output.  When +the OpenAFS Client Service starts and Bit 2 of the <a +href="#_Value__:_TraceOption">TraceOption</a> value in the registry is set, all +trace log events are output using the Windows Debug Monitor interface +(OutputDebugString).  </p> -<p class=PreformattedText> +<p class=preformattedtext>  [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p> -<p class=PreformattedText style='text-indent:12.0pt'>REG_DWORD TraceOption = -0x04</p> +<p class=preformattedtext style='text-indent:12.0pt'>REG_DWORD   +TraceOption = 0x04</p> <p class=MsoNormal>Use “fs trace –on” and “fs trace –off” to toggle the generation of log messages. </p> -<p class=MsoNormal><a name="_Toc126872215"></a><a name="_Toc115417086"></a><a -name="_Toc115416150">Sysinternal’s FileMon utility can be use to monitor the -file operations requested by applications and their success or failure. Use -the Volumes menu to restrict FileMon monitor to <i>Network</i> volumes only in -order to reduce the output to just the CIFS requests. Turn on the <i>Advanced -Output</i> option in order to log with finer granularity.</a></p> +<p class=MsoNormal><a name="_Toc115416150"></a><a name="_Toc126872215"></a><a +name="_Toc115417086"></a><span style='mso-bookmark:_Toc115416150'>Sysinternal’s +FileMon utility can be use to monitor the file operations requested by +applications and their success or failure.   Use the Volumes menu to +restrict FileMon monitor to <i>Network</i> volumes only in order to reduce the +output to just the CIFS requests.  Turn on the <i>Advanced Output</i> +option in order to log with finer granularity.</span></p> -<p class=MsoNormal>Turn on the <i>Clock Time</i> and <i>Show Milliseconds</i> -options in both tools to make it easier to synchronize the application requests -and the resulting OpenAFS Client Service operations. The captured data can be -stored to files for inclusion in <a href="../relnotes.htm#_5._Reporting_Bugs:">bug -reports</a>.</p> +<p class=MsoNormal>Turn on the <i>Clock Time</i> and <i>Show Milliseconds</i> options +in both tools to make it easier to synchronize the application requests and the +resulting OpenAFS Client Service operations.   The captured data can +be stored to files for inclusion in <a +href="../relnotes.htm#_5._Reporting_Bugs:">bug reports</a>.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993138">4.5. Microsoft -MiniDumps <br> +<h2><a name="_Toc139993138">4.5. Microsoft MiniDumps <br> (fs minidump -> %WinDir%\TEMP\afsd.dmp)</a></h2> <p class=MsoNormal>If the AFS Client Service become unresponsive to any form of communication there may be a serious error that can only be debugged by someone -with access to the source code and a debugger. The "fs minidump" -command can be used to force the generation of a MiniDump file containing the -state of all of the threads in the AFS Client Service process.</p> +with access to the source code and a debugger.   The "fs +minidump" command can be used to force the generation of a MiniDump file +containing the state of all of the threads in the AFS Client Service process.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993139"></a><a -name="_Toc126872216"></a><a name="_Toc115417087"></a><a name="_Toc115416151">4.6. -Single Sign-on (Integrated Logon) debugging</a></h2> +<h2><a name="_Toc115416151"></a><a name="_Toc139993139"></a><a +name="_Toc126872216"></a><a name="_Toc115417087"></a><span style='mso-bookmark: +_Toc115416151'>4.6. Single Sign-on (Integrated Logon) debugging</span></h2> <p class=MsoNormal>If you are having trouble with the Integrated Logon operations it is often useful to be able to obtain a log of what it is -attempting to do. Setting Bit 0 of the <a -href="#_Value__:_TraceOption">TraceOption</a> registry -value:</p> +attempting to do.   Setting Bit 0 of the <a +href="#_Value__:_TraceOption">TraceOption</a> registry value:</p> -<p class=PreformattedText> +<p class=preformattedtext>  [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p> -<p class=PreformattedText> REG_DWORD TraceOption = 0x01</p> +<p class=preformattedtext>  REG_DWORD   TraceOption = 0x01</p> <p class=MsoNormal>will instruct the Integrated Logon Network Provider and Event Handlers to log information to the Windows Event Log: Application under the name “AFS Logon".</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993140"></a><a -name="_Toc126872217"></a><a name="_Toc115417088"></a><a name="_Toc115416152">4.7. -RX (AFS RPC) debugging (rxdebug)</a></h2> +<h2><a name="_Toc115416152"></a><a name="_Toc139993140"></a><a +name="_Toc126872217"></a><a name="_Toc115417088"></a><span style='mso-bookmark: +_Toc115416152'>4.7. RX (AFS RPC) debugging (rxdebug)</span></h2> <p class=MsoNormal>The rxdebug.exe tool can be used to query a variety of -information about the AFS services installed on a given machine. The port for -the AFS Cache Manager is 7001. </p> +information about the AFS services installed on a given machine.  The port +for the AFS Cache Manager is 7001.  </p> -<p class=PreformattedText>Usage: rxdebug -servers <server machine> [-port +<p class=preformattedtext>Usage: rxdebug -servers <server machine> [-port <IP port>] [-nodally] </p> -<p class=PreformattedText style='margin-left:35.45pt;text-indent:35.45pt'> +<p class=preformattedtext style='margin-left:35.45pt;text-indent:35.45pt'>   [-allconnections] [-rxstats] [-onlyserver] [-onlyclient] </p> -<p class=PreformattedText style='margin-left:70.9pt'> [-onlyport <show -only <port>>] </p> +<p class=preformattedtext style='margin-left:70.9pt'>   [-onlyport +<show only <port>>] </p> -<p class=PreformattedText style='margin-left:70.9pt'> [-onlyhost <show -only <host>>] </p> +<p class=preformattedtext style='margin-left:70.9pt'>   [-onlyhost +<show only <host>>] </p> -<p class=PreformattedText style='margin-left:70.9pt'> [-onlyauth <show -only <auth level>>] [-version] </p> +<p class=preformattedtext style='margin-left:70.9pt'>   [-onlyauth +<show only <auth level>>] [-version] </p> -<p class=PreformattedText style='margin-left:70.9pt'> [-noconns] [-peers] -[-help]</p> +<p class=preformattedtext style='margin-left:70.9pt'>   [-noconns] +[-peers] [-help]</p> -<p class=PreformattedText>Where: -nodally don't show dallying conns</p> +<p class=preformattedtext>Where: +-nodally         don't show dallying +conns</p> -<p class=PreformattedText> -allconnections don't filter out -uninteresting connections</p> +<p class=preformattedtext>       +-allconnections  don't filter out uninteresting connections</p> -<p class=PreformattedText> -rxstats show Rx statistics</p> +<p class=preformattedtext>       +-rxstats         show Rx statistics</p> -<p class=PreformattedText> -onlyserver only show server conns</p> +<p class=preformattedtext>       +-onlyserver      only show server conns</p> -<p class=PreformattedText> -onlyclient only show client conns</p> +<p class=preformattedtext>       +-onlyclient      only show client conns</p> -<p class=PreformattedText> -version show AFS version id</p> +<p class=preformattedtext>       +-version         show AFS version id</p> -<p class=PreformattedText> -noconns show no connections</p> +<p class=preformattedtext>       -noconns         +show no connections</p> -<p class=PreformattedText> -peers show peers</p> +<p class=preformattedtext>       +-peers           show peers</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993141"></a><a -name="_Toc126872218"></a><a name="_Toc115417089"></a><a name="_Toc115416153">4.8. -Cache Manager debugging (cmdebug)</a></h2> +<h2><a name="_Toc115416153"></a><a name="_Toc139993141"></a><a +name="_Toc126872218"></a><a name="_Toc115417089"></a><span style='mso-bookmark: +_Toc115416153'>4.8. Cache Manager debugging (cmdebug)</span></h2> <p class=MsoNormal>The cmdebug.exe tool can be used to query the state of the AFS Cache Manager on a given machine.</p> -<p class=PreformattedText>Usage: cmdebug -servers <server machine> [-port +<p class=preformattedtext>Usage: cmdebug -servers <server machine> [-port <IP port>] [-long] </p> -<p class=PreformattedText style='margin-left:70.9pt'> [-refcounts] +<p class=preformattedtext style='margin-left:70.9pt'>   [-refcounts] [-callbacks] [-addrs] [-cache] [-help]</p> -<p class=PreformattedText>Where: -long print all info</p> +<p class=preformattedtext>Where: -long       +print all info</p> -<p class=PreformattedText> -refcounts print only cache entries with -positive reference counts</p> +<p class=preformattedtext>       -refcounts  +print only cache entries with positive reference counts</p> -<p class=PreformattedText> -callbacks print only cache entries with -callbacks</p> +<p class=preformattedtext>       -callbacks  +print only cache entries with callbacks</p> -<p class=PreformattedText> -addrs print only host interfaces</p> +<p class=preformattedtext>       -addrs      +print only host interfaces</p> -<p class=PreformattedText> -cache print only cache configuration</p> +<p class=preformattedtext>       +-cache      print only cache configuration</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993142"></a><a -name="_Toc126872219"></a><a name="_Toc115417090"></a><a name="_Toc115416154">4.9. -Persistent Cache consistency check</a></h2> +<h2><a name="_Toc115416154"></a><a name="_Toc139993142"></a><a +name="_Toc126872219"></a><a name="_Toc115417090"></a><span style='mso-bookmark: +_Toc115416154'>4.9. Persistent Cache consistency check</span></h2> <p class=MsoNormal>The persistent cache is stored in a Hidden System file at -%WinDir%\TEMP\AFSCache. If there is a problem with the persistent cache that -prevent the AFS Client Service from being able to start a validation check on -the file can be performed.</p> +%WinDir%\TEMP\AFSCache.  If there is a problem with the persistent cache +that prevent the AFS Client Service from being able to start a validation check +on the file can be performed.</p> -<p class=PreformattedText> afsd_service.exe --validate-cache +<p class=preformattedtext>  afsd_service.exe --validate-cache <cache-path></p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993143"></a><a -name="_Toc126872220"></a><a name="_Toc115417113"></a><a name="_Toc115417091"></a><a -name="_Toc115416155"></a><a name="_5._Reporting_Bugs:"></a>5. Reporting Bugs:</h1> +<h1><a name="_Toc139993143"></a><a name="_Toc126872220"></a><a +name="_Toc115417113"></a><a name="_Toc115417091"></a><a name="_Toc115416155"></a><a +name="_5._Reporting_Bugs:"></a>5. Reporting Bugs:</h1> <p class=MsoNormal>Bug reports should be sent to <a -href="mailto:openafs-bugs@openafs.org?subject=Bug%20Report">openafs-bugs@openafs.org</a>. -Please include as much information as possible about the issue. If you are -reporting a crash, please install the debugging symbols by re-running the -installer. If a dump file is available for the problem, -%WINDIR%\TEMP\afsd.dmp, include it along with the AFS Client Trace file -%WINDIR%\TEMP\afsd.log. The AFS Client startup log is -%WINDIR%\TEMP\afsd_init.log. Send the last continuous block of log information -from this file.</p> +href="mailto:openafs-bugs@openafs.org?subject=Bug%20Report">openafs-bugs@openafs.org</a>.  +Please include as much information as possible about the issue.  If you +are reporting a crash, please install the debugging symbols by re-running the +installer.  If a dump file is available for the problem, %WINDIR%\TEMP\afsd.dmp, +include it along with the AFS Client Trace file  +%WINDIR%\TEMP\afsd.log.  The AFS Client startup log is +%WINDIR%\TEMP\afsd_init.log.  Send the last continuous block of  log +information from this file.</p> <p class=MsoNormal>Configuring DrWatson to generate dump files for crashes:</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Run drwtsn32.exe to configure or to identify where the log and -the crash dump files are created: </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Run +drwtsn32.exe to configure or to identify where the log and the crash dump files +are created: </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>click Start > Run... </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>click +Start > Run...  </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>type drwtsn32 <enter>. </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>type +drwtsn32 <enter>. </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Select either a Crash Dump Type: Mini or Full. </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Select +either a Crash Dump Type: Mini or Full. </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Clear Dump Symbol Table</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Clear +Dump Symbol Table</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Clear Append to Existing Log file. </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Clear +Append to Existing Log file. </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Check Dump All Thread Contexts.</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Check +Dump All Thread Contexts.</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Check Create Crash Dump File</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Check +Create Crash Dump File</p> <p class=MsoNormal style='margin-left:14.15pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Next run the monitoring module of Dr. Watson: </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Next +run the monitoring module of Dr. Watson: </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>click Start > Run...</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>click +Start > Run...</p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>type drwatson <enter>. </p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>type +drwatson <enter>. </p> <p class=MsoNormal style='margin-left:49.6pt;text-indent:-14.15pt'><span -style='font-size:9.0pt;font-family:Symbol'>·<span style='font:7.0pt "Times New Roman"'>       -</span></span>Once a crash happens, Dr. Watson generates a dump file and a -report in the log file, including the address of the crash and the stack dump.</p> +style='font-size:9.0pt;font-family:Symbol'>·</span><span style='font-size:7.0pt; +font-family:"Times New Roman"'>       </span>Once +a crash happens, Dr. Watson generates a dump file and a report in the log file, +including the address of the crash and the stack dump.</p> <p class=MsoNormal>Once you have the Dr. Watson's logfile and minidump, zip them and attach them to your e-mail.</p> @@ -1841,94 +2163,101 @@ them and attach them to your e-mail.</p> <p class=MsoNormal>When reporting a error, please be sure to include the version of OpenAFS.</p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993144"></a><a -name="_Toc126872221"></a><a name="_Toc115417114"></a><a name="_Toc115417092"></a><a -name="_Toc115416156">6. How to Contribute to the Development of OpenAFS for -Windows</a></h1> +<h1><a name="_Toc115416156"></a><a name="_Toc139993144"></a><a +name="_Toc126872221"></a><a name="_Toc115417114"></a><a name="_Toc115417092"></a><span +style='mso-bookmark:_Toc115416156'>6. How to Contribute to the Development of +OpenAFS for Windows</span></h1> <p class=MsoNormal>Contributions to the development of OpenAFS for Windows are -continuously needed. Contributions may take many forms including cash +continuously needed.  Contributions may take many forms including cash donations, support contracts, donated developer time, and even donated tech writer time.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993145"></a><a -name="_Toc126872222"></a><a name="_Toc115417093"></a><a name="_Toc115416157">6.1. -The USENIX OpenAFS Fund</a> </h2> +<h2><a name="_Toc115416157"></a><a name="_Toc139993145"></a><a +name="_Toc126872222"></a><a name="_Toc115417093"></a><span style='mso-bookmark: +_Toc115416157'>6.1. The USENIX OpenAFS Fund</span> </h2> <p class=MsoBodyText><a href="http://www.usenix.org/">USENIX</a>, a 501c3 non-profit corporation, has formed the USENIX OpenAFS Fund in order to accept tax deductible donations on behalf of the OpenAFS Elders. The donated funds will be allocated by the OpenAFS Elders to fund OpenAFS development, -documentation, project management, and maintaining openafs.org. </p> +documentation, project management, and maintaining openafs.org. <o:p></o:p></p> <div> -<table cellspacing=0 cellpadding=0 hspace=0 vspace=0 width=540 height=88> - <tr> - <td valign=top align=left height=88 style='padding-top:0pt;padding-right: - 9.0pt;padding-bottom:0pt;padding-left:9.0pt'> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=540 + style='width:405.0pt;mso-cellspacing:0pt;mso-padding-alt:0pt 0pt 0pt 0pt' + hspace=0 vspace=0 height=88> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:66.0pt'> + <td valign=top style='padding:0pt 9.0pt 0pt 9.0pt;height:66.0pt'> <p class=MsoEnvelopeAddress>USENIX OpenAFS Fund<br> USENIX Association <br> - 2560 Ninth St., Suite 215 <br> - Berkeley, CA 94710 </p> +<st1:address w:st="on"><st1:Street w:st="on">2560 Ninth St., Suite 215</st1:Street> + <br> +<st1:City w:st="on">Berkeley</st1:City>, <st1:State w:st="on">CA</st1:State> <st1:PostalCode + w:st="on">94710</st1:PostalCode></st1:address> </p> </td> </tr> </table> </div> -<br clear=ALL> +<p class=MsoNormal style='margin:0pt;margin-bottom:.0001pt'><span +style='font-family:"Times New Roman"'><br clear=all style='mso-special-character: +line-break'> +<o:p></o:p></span></p> <p class=MsoBodyText>Donations can be made by sending a check, drawn on a U.S. bank, made out to the USENIX OpenAFS Fund or by making a <a href="https://db.usenix.org/cgi-bin/openafs/openafs.cgi">donation online</a>.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993146"></a><a -name="_Toc126872223"></a><a name="_Toc115417094">6.2. Secure Endpoints Inc.</a> -</h2> +<h2><a name="_Toc115417094"></a><a name="_Toc139993146"></a><a +name="_Toc126872223"></a><span style='mso-bookmark:_Toc115417094'>6.2. Secure +Endpoints Inc.</span> </h2> <p class=MsoBodyText><a href="http://www.secure-endpoints.com/">Secure Endpoints Inc.</a> provides development and support services for OpenAFS for -Windows and MIT Kerberos for Windows. Donations provided to Secure Endpoints -Inc. for the development of OpenAFS are used to cover the OpenAFS gatekeeper responsibilities; -providing support to the OpenAFS community via the OpenAFS mailing lists; and -furthering development of desired features that are either too small to be -financed by development contracts.</p> +Windows and MIT Kerberos for Windows.  Donations provided to Secure +Endpoints Inc. for the development of OpenAFS are used to cover the OpenAFS +gatekeeper responsibilities; providing support to the OpenAFS community via the +OpenAFS mailing lists; and furthering development of desired features that are +either too small to be financed by development contracts.</p> -<p class=MsoBodyText>Secure Endpoints Inc. accepts software development agreements -from organizations who wish to fund a well-defined set of bug fixes or new -features. </p> +<p class=MsoBodyText>Secure Endpoints Inc. accepts software development +agreements from organizations who wish to fund a well-defined set of bug fixes +or new features. </p> <p class=MsoBodyText>Secure Endpoints Inc. provides contract based support for the OpenAFS for Windows and the MIT Kerberos for Windows products. </p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993147"></a><a -name="_Toc126872224"></a><a name="_Toc115417095">6.3. The MIT Kerberos Account</a> -</h2> +<h2><a name="_Toc115417095"></a><a name="_Toc139993147"></a><a +name="_Toc126872224"></a><span style='mso-bookmark:_Toc115417095'>6.3. The MIT +Kerberos Account</span> </h2> <p class=MsoNormal style='margin:0pt;margin-bottom:.0001pt;text-autospace:none'><span style='font-family:"Times New Roman";color:black'>Th</span><span -class=BodyTextChar>e <a href="http://web.mit.edu/kerberos/">MIT Kerberos</a> development -team accepts unrestricted grants. Grants are tax deductible and the full -amount of the grant will be used to fund the development of Kerberos 5 and/or -Kerberos for Windows. OpenAFS for Windows is dependent on MIT Kerberos for -Windows for authentication and shares many of the same re</span><span +class=bodytextchar>e <a href="http://web.mit.edu/kerberos/">MIT Kerberos</a> +development team accepts unrestricted grants.  Grants are tax deductible +and the full amount of the grant will be used to fund the development of +Kerberos 5 and/or Kerberos for Windows.  OpenAFS for Windows is dependent +on MIT Kerberos for Windows for authentication and shares many of the same re</span><span style='font-family:"Times New Roman";color:black'>quirements for credential -management. Future releases of both products will share a common identity +management.  Future releases of both products will share a common identity management user interface. </span></p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993148"></a><a -name="_Toc126872225"></a><a name="_Toc115417096">6.4. Direct contributions of -code and/or documentation</a> </h2> +<h2><a name="_Toc115417096"></a><a name="_Toc139993148"></a><a +name="_Toc126872225"></a><span style='mso-bookmark:_Toc115417096'>6.4. Direct +contributions of code and/or documentation</span> </h2> <p class=MsoBodyText>Organizations that use OpenAFS in house and have development staffs are encouraged to contribute any code modifications they make to OpenAFS.org via <u><span style='color:blue'>openafs-bugs@openafs.org</span></u>. - Contributions of documentation are highly desired. </p> + Contributions of documentation are highly desired. </p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993149"></a><a -name="_Toc126872226"></a><a name="_Toc115417097">6.5. OpenAFS for Windows -Mailing Lists</a></h2> +<h2><a name="_Toc115417097"></a><a name="_Toc139993149"></a><a +name="_Toc126872226"></a><span style='mso-bookmark:_Toc115417097'>6.5. OpenAFS +for Windows Mailing Lists</span></h2> <p class=MsoNormal>If you wish to participate in OpenAFS for Windows development please join the <i><a @@ -1939,55 +2268,53 @@ mailing list.</p> <p class=MsoNormal>User questions should be sent to the <a href="mailto:openafs-info@openafs.org?subject=OpenAFS%20for%20Windows%20User%20Question">openafs-info@openafs.org</a> -mailing list. </p> +mailing list.  </p> <p class=MsoNormal style='margin-left:35.45pt'><span class=MsoHyperlink>https://lists.openafs.org/mailman/listinfo/openafs-info</span></p> <p class=MsoNormal>You must join the mailing lists if you wish to post to the list without incurring a moderation delay.</p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993150"></a><a -name="_Toc126872227"></a><a name="_Toc115417115"></a><a name="_Toc115417098"></a><a -name="_Toc115416158"></a><a name="_MSI_Deployment_Guide"></a>7. MSI Deployment -Guide</h1> +<h1><a name="_Toc139993150"></a><a name="_Toc126872227"></a><a +name="_Toc115417115"></a><a name="_Toc115417098"></a><a name="_Toc115416158"></a><a +name="_MSI_Deployment_Guide"></a>7. MSI Deployment Guide</h1> -</div> - -<b><span style='font-size:16.0pt;font-family:Albany'><br clear=all +<i><span style='font-size:16.0pt;font-family:Albany;mso-fareast-font-family: +"MS Mincho";mso-bidi-font-family:"Times New Roman";mso-ansi-language:EN-US; +mso-fareast-language:JA;mso-bidi-language:AR-SA'><br clear=all style='page-break-before:always'> -</span></b> +</span></i> -<div class=Section2> - -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993151"></a><a -name="_Toc126872228"></a><a name="_Toc115417099"></a><a name="_Toc115416159">7.1. -Introduction</a></h2> +<h2><a name="_Toc115416159"></a><a name="_Toc139993151"></a><a +name="_Toc126872228"></a><a name="_Toc115417099"></a><span style='mso-bookmark: +_Toc115416159'>7.1. Introduction</span></h2> <p class=MsoNormal>A MSI installer option is available for those who wish to use Windows Installer for installing OpenAFS and for organizations that wish to -deploy OpenAFS through Group Policy. The first version of OpenAFS for Windows -available as an MSI was 1.3.65.</p> +deploy OpenAFS through Group Policy.  The first version of OpenAFS for +Windows available as an MSI was 1.3.65.</p> <p class=MsoNormal>This document provides a guide for authoring transforms used -to customize the MSI package for a particular organization. Although many +to customize the MSI package for a particular organization.  Although many settings can be deployed via transforms, in an Active Directory environment it -is advisable to deploy registry settings and configuration files through -group policy and/or startup scripts so that machines where OpenAFS for Windows -is already installed will pick up these customizations.</p> +is advisable to deploy registry settings    and configuration +files through group policy and/or startup scripts so that machines where +OpenAFS for Windows is already installed will pick up these customizations.</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993152"></a><a -name="_Toc126872229"></a><a name="_Toc115416160">7.1.1 Requirements</a></h3> +<h3><a name="_Toc115416160"></a><a name="_Toc139993152"></a><a +name="_Toc126872229"></a><span style='mso-bookmark:_Toc115416160'>7.1.1 +Requirements</span></h3> <p class=MsoNormal>The information in this document applies to MSI packages distributed with OpenAFS for Windows releases from 1.3.65 and onwards or MSI -packages built from corresponding source releases. Not all releases support -all the configuration options documented here.</p> +packages built from corresponding source releases.  Not all releases +support all the configuration options documented here.</p> <p class=MsoNormal>Authoring a "Windows Installer" transform requires additional software for editing the MSI database tables and generating the -transform from the modified MSI package. ORCA.EXE and MSITRAN.EXE which are -included in the Windows Platform SDK ("Windows Installer" SDK) can be -used for this purpose.</p> +transform from the modified MSI package.  ORCA.EXE and MSITRAN.EXE which +are included in the Windows Platform SDK ("Windows Installer" SDK) +can be used for this purpose.</p> <p class=MsoNormal>For reference, the schema for the MSI package is based on SCHEMA.MSI distributed with the Platform SDK.</p> @@ -1995,344 +2322,319 @@ SCHEMA.MSI distributed with the Platform SDK.</p> <p class=MsoNormal>For general information about "Windows Installer", refer to:</p> -<p class=MsoNormal> <a +<p class=MsoNormal>    <a href="http://msdn.microsoft.com/library/en-us/msi/setup/windows_installer_start_page.asp">http://msdn.microsoft.com/library/en-us/msi/setup/windows_installer_start_page.asp</a></p> <p class=MsoNormal>For general information about authoring MSI transforms, refer to:</p> -<p class=MsoNormal> <a +<p class=MsoNormal>    <a href="http://msdn.microsoft.com/library/en-us/msi/setup/transforms.asp">http://msdn.microsoft.com/library/en-us/msi/setup/transforms.asp</a></p> <p class=MsoNormal>The remainder of this document assumes some familiarity with -authoring transforms. While the MSDN documentation for Windows Installer is a -bit dense, the guide on MSI transforms found at the second link above is -recommended reading. MSDN also includes a step-by-step example for creating a -transform at:</p> +authoring transforms.  While the MSDN documentation for Windows Installer +is a bit dense, the guide on MSI transforms found at the second link above is +recommended reading.  MSDN also includes a step-by-step example for +creating a transform at:</p> -<p class=MsoNormal> <a +<p class=MsoNormal>    <a href="http://msdn.microsoft.com/library/en-us/msi/setup/a_customization_transform_example.asp">http://msdn.microsoft.com/library/en-us/msi/setup/a_customization_transform_example.asp</a></p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993153"></a><a -name="_Toc126872230"></a><a name="_Toc115416161">7.1.2 Authoring a Transform</a></h3> +<h3><a name="_Toc115416161"></a><a name="_Toc139993153"></a><a +name="_Toc126872230"></a><span style='mso-bookmark:_Toc115416161'>7.1.2 +Authoring a Transform</span></h3> <p class=MsoNormal>Transforms describe a set of modifications to be performed -on an existing MSI for the purpose of customizing it. This is ordinarily done -by making a copy of the MSI to be customized, modifying the copy and then using -the old and the new MSI to generate a transform. For example:</p> +on an existing MSI for the purpose of customizing it.  This is ordinarily +done by making a copy of the MSI to be customized, modifying the copy and then +using the old and the new MSI to generate a transform.  For example:</p> -<p class=PreformattedText style='margin-left:36.0pt;text-indent:-18.0pt'>1.<span -style='font:7.0pt "Times New Roman"'>    </span>copy openafs.msi -openafs-modified.msi</p> +<p class=preformattedtext style='margin-left:36.0pt;text-indent:-18.0pt'>1.<span +style='font-size:7.0pt;font-family:"Times New Roman"'>    </span>copy +openafs.msi openafs-modified.msi</p> -<p class=PreformattedText style='margin-left:36.0pt;text-indent:-18.0pt'>2.<span -style='font:7.0pt "Times New Roman"'>    </span>(edit the -openafs-modified.msi to include the necessary changes)</p> +<p class=preformattedtext style='margin-left:36.0pt;text-indent:-18.0pt'>2.<span +style='font-size:7.0pt;font-family:"Times New Roman"'>    </span>(edit +the openafs-modified.msi to include the necessary changes)</p> -<p class=PreformattedText style='margin-left:36.0pt;text-indent:-18.0pt'>3.<span -style='font:7.0pt "Times New Roman"'>    </span>msitran -g -openafs.msi openafs-modified.msi openafs-transform.mst</p> +<p class=preformattedtext style='margin-left:36.0pt;text-indent:-18.0pt'>3.<span +style='font-size:7.0pt;font-family:"Times New Roman"'>    </span>msitran +-g openafs.msi openafs-modified.msi openafs-transform.mst</p> -<p class=PreformattedText style='margin-left:36.0pt;text-indent:-18.0pt'>4.<span -style='font:7.0pt "Times New Roman"'>    </span>(generates +<p class=preformattedtext style='margin-left:36.0pt;text-indent:-18.0pt'>4.<span +style='font-size:7.0pt;font-family:"Times New Roman"'>    </span>(generates openafs-transform.mst, which is the transform)</p> -<p class=MsoNormal>Transforms have an extension of .mst. 'msitran' is a tool -distributed as part of the "Windows Installer" SDK (part of the +<p class=MsoNormal>Transforms have an extension of .mst.  'msitran' is a +tool distributed as part of the "Windows Installer" SDK (part of the Windows Platform SDK).</p> <p class=MsoNormal>You can test a transform by:</p> -<p class=PreformattedText style='margin-left:36.0pt;text-indent:-18.0pt'>1.<span -style='font:7.0pt "Times New Roman"'>    </span>copy openafs.msi -openafs-test.msi</p> +<p class=preformattedtext style='margin-left:36.0pt;text-indent:-18.0pt'>1.<span +style='font-size:7.0pt;font-family:"Times New Roman"'>    </span>copy +openafs.msi openafs-test.msi</p> -<p class=PreformattedText style='margin-left:36.0pt;text-indent:-18.0pt'>2.<span -style='font:7.0pt "Times New Roman"'>    </span>msitran -a -openafs-transform.mst openafs-test.msi</p> +<p class=preformattedtext style='margin-left:36.0pt;text-indent:-18.0pt'>2.<span +style='font-size:7.0pt;font-family:"Times New Roman"'>    </span>msitran +-a openafs-transform.mst openafs-test.msi</p> -<p class=MsoNormal>and then checking the resulting openafs-test.msi to see if -all changes you have made above to openafs-modified.msi is present in -openafs-test.msi. 'msitran' will complain if some modification in the +<p class=MsoNormal>and then checking the resulting openafs-test.msi to see if all +changes you have made above to openafs-modified.msi is present in +openafs-test.msi.  'msitran' will complain if some modification in the transform can not be successfully applied.</p> <p class=MsoNormal>As mentioned above, you can use a tool like ORCA.EXE to edit -the MSI databases directly when editing openafs-modified.msi. More details are -given below.</p> +the MSI databases directly when editing openafs-modified.msi.  More +details are given below.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993154"></a><a -name="_Toc126872231"></a><a name="_Toc115417100"></a><a name="_Toc115416162">7.2. -Configuration Options</a></h2> +<h2><a name="_Toc115416162"></a><a name="_Toc139993154"></a><a +name="_Toc126872231"></a><a name="_Toc115417100"></a><span style='mso-bookmark: +_Toc115416162'>7.2. Configuration Options</span></h2> <p class=MsoNormal>The logic necessary to implement many of the settings -described in <a -href="#_Appendix_A:_Registry_Values">Appendix A</a> -are present in the MSI. Most of these can be controlled by setting the -corresponding properties to the desired value. Some settings may require -modifying existing registry entries (though not recommended) or adding new resources -(like files or registry keys). Instructions for performing these tasks are -below.</p> +described in <a href="#_Appendix_A:_Registry_Values">Appendix A</a> are present +in the MSI.  Most of these can be controlled by setting the corresponding +properties to the desired value.  Some settings may require modifying +existing registry entries (though not recommended) or adding new resources +(like files or registry keys).  Instructions for performing these tasks +are below.</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993155"></a><a -name="_Toc126872232"></a><a name="_Toc115416163">7.2.1 Configurable Properties</a></h3> +<h3><a name="_Toc115416163"></a><a name="_Toc139993155"></a><a +name="_Toc126872232"></a><span style='mso-bookmark:_Toc115416163'>7.2.1 +Configurable Properties</span></h3> <p class=MsoNormal>Most configurable properties correspond to registry keys or -values. Due to the logic invoked based on the existence of these registry keys -or values, they are only set if the associated property is defined to have a -non null value. If the associated property is not defined in the MSI, the -registry key or value will not be touched. By default, the MSI does not -contain these properties and hence will not set the registry keys. You will -need to add properties as needed to the MSI.</p> +values.  Due to the logic invoked based on the existence of these registry +keys or values, they are only set if the associated property is defined to have +a non null value.  If the associated property is not defined in the MSI, +the registry key or value will not be touched.  By default, the MSI does +not contain these properties and hence will not set the registry keys.  +You will need to add properties as needed to the MSI.</p> <p class=MsoNormal>When one of the configurable properties is set, the installer will use the property value to set the corresponding setting in the -HKEY_LOCAL_MACHINE registry hive. The HKEY_CURRENT_USER hive is not touched by -the installer.</p> +HKEY_LOCAL_MACHINE registry hive.  The HKEY_CURRENT_USER hive is not +touched by the installer.</p> <p class=MsoNormal>For each property, the associated registry setting is -referenced by the same text used in <a -href="#_Appendix_A:_Registry_Values">Appendix A</a>.</p> +referenced by the same text used in <a href="#_Appendix_A:_Registry_Values">Appendix +A</a>.</p> <p class=MsoNormal>Strings are quoted using single quotes (e.g. 'a string'). An -empty string is denoted as ''. Note that you can't author null values into the -'Property' table.</p> +empty string is denoted as ''.  Note that you can't author null values +into the 'Property' table.</p> <p class=MsoNormal>Numeric values should be authored as decimal strings.</p> -<h4><a name="_Toc139993156"></a><a name="_Toc126872233"></a><a -name="_Toc115416164">7.2.1.1 Setting Properties</a></h4> +<h4><a name="_Toc115416164"></a><a name="_Toc139993156"></a><a +name="_Toc126872233"></a><span style='mso-bookmark:_Toc115416164'>7.2.1.1 +Setting Properties</span></h4> <p class=MsoNormal>In order to set a property,</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>1.<span -style='font:7.0pt "Times New Roman"'>        -</span></span>Open the MSI in ORCA.EXE</p> +margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>1.</span><span +style='font-size:7.0pt;font-family:"Times New Roman"'>        +</span>Open the MSI in ORCA.EXE</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>2.<span -style='font:7.0pt "Times New Roman"'>        -</span></span>Select the 'Property' table from the list of tables on the left.</p> +margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>2.</span><span +style='font-size:7.0pt;font-family:"Times New Roman"'>        +</span>Select the 'Property' table from the list of tables on the left.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>3.<span -style='font:7.0pt "Times New Roman"'>        -</span></span>Find the property in the list of properties on the right, double -click the value and type the new value.</p> +margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>3.</span><span +style='font-size:7.0pt;font-family:"Times New Roman"'>        +</span>Find the property in the list of properties on the right, double click +the value and type the new value.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>4.<span -style='font:7.0pt "Times New Roman"'>        -</span></span>If the property does not exist in the property list, right click -the list and select 'Add Row', type the property name and the desired value.</p> +margin-left:18.0pt;text-indent:-18.0pt'><span style='font-size:9.0pt'>4.</span><span +style='font-size:7.0pt;font-family:"Times New Roman"'>        +</span>If the property does not exist in the property list, right click the +list and select 'Add Row', type the property name and the desired value.</p> -<h4><a name="_Toc139993157"></a><a name="_Toc126872234"></a><a -name="_Toc115416165">7.2.1.2 OpenAFS for Windows Properties</a></h4> +<h4><a name="_Toc115416165"></a><a name="_Toc139993157"></a><a +name="_Toc126872234"></a><span style='mso-bookmark:_Toc115416165'>7.2.1.2 +OpenAFS for Windows Properties</span></h4> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h5><a name="_Toc139993158"></a><a name="_Toc126872235"></a><a - name="_Toc115416166"></a><a name="_(Service_parameters):"></a>(Service - parameters):</h5> - <p class=ListContents style='margin-left:0pt'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p> + <h5><a name="_(Service_parameters):"></a><a name="_Toc115416166"></a><a + name="_Toc126872235"></a><a name="_Toc139993158"></a>(Service parameters):</h5> + <p class=listcontents style='margin-left:0pt'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h5><a name="_Toc139993159"></a><a name="_Toc126872236"></a><a - name="_Toc115416167"></a><a name="_(Network_provider):"></a>(Network - provider):</h5> - <p class=ListContents style='margin-left:0pt'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]</p> + <h5><a name="_(Network_provider):"></a><a name="_Toc115416167"></a><a + name="_Toc126872236"></a><a name="_Toc139993159"></a>(Network provider):</h5> + <p class=listcontents style='margin-left:0pt'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2;mso-yfti-lastrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h5><a name="_Toc139993160"></a><a name="_Toc126872237"></a><a - name="_Toc115416168"></a><a name="_(OpenAFS_Client):"></a>(OpenAFS Client):</h5> - <p class=ListContents style='margin-left:0pt'>[HKLM\SOFTWARE\OpenAFS\Client]</p> + <h5><a name="_(OpenAFS_Client):"></a><a name="_Toc115416168"></a><a + name="_Toc126872237"></a><a name="_Toc139993160"></a>(OpenAFS Client):</h5> + <p class=listcontents style='margin-left:0pt'>[HKLM\SOFTWARE\OpenAFS\Client]</p> </td> </tr> </table> -<h5><a name="_Toc139993161"></a><a name="_Toc126872238"></a><a -name="_Toc115416169">7.2.1.2.1 Registry Properties</a></h5> +<h5><a name="_Toc115416169"></a><a name="_Toc139993161"></a><a +name="_Toc126872238"></a><span style='mso-bookmark:_Toc115416169'>7.2.1.2.1 +Registry Properties</span></h5> -<p class=MsoNormal>These properties are used to set the values of registry -entries associated with OpenAFS for Windows.</p> +<p class=MsoNormal>These properties are used to set the values of registry entries +associated with OpenAFS for Windows.</p> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993162"></a><a name="_Toc126872239"></a><a - name="_Toc115416170">AFSCACHEPATH</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_CachePath">CachePath</a></p> - <p class=MsoList>Valid values : string .</p> + <h6><a name="_Toc115416170"></a><a name="_Toc126872239"></a><a + name="_Toc139993162"></a><span style='mso-bookmark:_Toc115416170'>AFSCACHEPATH</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_CachePath">CachePath</a></p> + <p class=MsoList>Valid values    : string .</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993163"></a><a name="_Toc126872240"></a><a - name="_Toc115416171">AFSCACHESIZE</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value___: CacheSize">CacheSize</a></p> - <p class=MsoList>Valid values : numeric</p> + <h6><a name="_Toc115416171"></a><a name="_Toc126872240"></a><a + name="_Toc139993163"></a><span style='mso-bookmark:_Toc115416171'>AFSCACHESIZE</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value___:_CacheSize">CacheSize</a></p> + <p class=MsoList>Valid values    : numeric</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993164"></a><a name="_Toc126872241"></a><a - name="_Toc115416172">AFSCELLNAME</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_Cell">Cell</a></p> - <p class=MsoList>Valid values : string</p> + <h6><a name="_Toc115416172"></a><a name="_Toc126872241"></a><a + name="_Toc139993164"></a><span style='mso-bookmark:_Toc115416172'>AFSCELLNAME</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_Cell">Cell</a></p> + <p class=MsoList>Valid values    : string</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993165"></a><a name="_Toc126872242"></a><a - name="_Toc115416173">FREELANCEMODE</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_FreelanceClient">FreelanceClient</a></p> - <p class=MsoList>Valid values : '1' or '0'</p> + <h6><a name="_Toc115416173"></a><a name="_Toc126872242"></a><a + name="_Toc139993165"></a><span style='mso-bookmark:_Toc115416173'>FREELANCEMODE</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_FreelanceClient">FreelanceClient</a></p> + <p class=MsoList>Valid values    : '1' or '0'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993166"></a><a name="_Toc126872243"></a><a - name="_Toc115416174">HIDEDOTFILES</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_HideDotFiles">HideDotFiles</a></p> - <p class=MsoList>Valid values : '1' or '0'</p> + <h6><a name="_Toc115416174"></a><a name="_Toc126872243"></a><a + name="_Toc139993166"></a><span style='mso-bookmark:_Toc115416174'>HIDEDOTFILES</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_HideDotFiles">HideDotFiles</a></p> + <p class=MsoList>Valid values    : '1' or '0'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993167"></a><a name="_Toc126872244"></a><a - name="_Toc115416175">LOGONOPTIONS</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Network_provider):">(Network - provider)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value___: LogonOptions">LogonOptions</a></p> - <p class=MsoList>Valid values : '0', '1' or '3'</p> - <p class=MsoNormal>See <a - href="#_Appendix_A:_Registry_Values">Appendix - A</a> <a - href="#_A.2.1_Domain_specific_configuration">section - 2.1 (Domain specific configuration keys for Network Provider)</a> for more - details.</p> + <h6><a name="_Toc115416175"></a><a name="_Toc126872244"></a><a + name="_Toc139993167"></a><span style='mso-bookmark:_Toc115416175'>LOGONOPTIONS</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Network_provider):">(Network provider)</a></p> + <p class=MsoList>Registry value : <a href="#_Value___:_LogonOptions">LogonOptions</a></p> + <p class=MsoList>Valid values    : '0', '1' or '3'</p> + <p class=MsoNormal>See <a href="#_Appendix_A:_Registry_Values">Appendix A</a> + <a href="#_A.2.1_Domain_specific_configuration">section 2.1 (Domain specific + configuration keys for Network Provider)</a> for more details.</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:6'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993168"></a><a name="_Toc126872245"></a><a - name="_Toc115416176">MOUNTROOT</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_Mountroot">Mountroot</a></p> - <p class=MsoList>Valid values : string</p> + <h6><a name="_Toc115416176"></a><a name="_Toc126872245"></a><a + name="_Toc139993168"></a><span style='mso-bookmark:_Toc115416176'>MOUNTROOT</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_Mountroot">Mountroot</a></p> + <p class=MsoList>Valid values    : string</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:7'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993169"></a><a name="_Toc126872246"></a><a - name="_Toc115416177">NETBIOSNAME</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value___: NetbiosName">NetbiosName</a></p> - <p class=MsoList>Valid values : string (at most 15 characters)</p> + <h6><a name="_Toc115416177"></a><a name="_Toc126872246"></a><a + name="_Toc139993169"></a><span style='mso-bookmark:_Toc115416177'>NETBIOSNAME</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value___:_NetbiosName">NetbiosName</a></p> + <p class=MsoList>Valid values    : string (at most 15 + characters)</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:8'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993170"></a><a name="_Toc126872247"></a><a - name="_Toc115416178">NOFINDLANABYNAME</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value___: NoFindLanaByName">NoFindLanaByName</a></p> - <p class=MsoList>Valid values : '1' or '0'</p> + <h6><a name="_Toc115416178"></a><a name="_Toc126872247"></a><a + name="_Toc139993170"></a><span style='mso-bookmark:_Toc115416178'>NOFINDLANABYNAME</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value___:_NoFindLanaByName">NoFindLanaByName</a></p> + <p class=MsoList>Valid values    : '1' or '0'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:9'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993171"></a><a name="_Toc126872248"></a><a - name="_Toc115416179">RXMAXMTU</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_RxMaxMTU">RxMaxMTU</a></p> - <p class=MsoList>Valid values : numeric</p> + <h6><a name="_Toc115416179"></a><a name="_Toc126872248"></a><a + name="_Toc139993171"></a><span style='mso-bookmark:_Toc115416179'>RXMAXMTU</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_RxMaxMTU">RxMaxMTU</a></p> + <p class=MsoList>Valid values    : numeric</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:10'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993172"></a><a name="_Toc126872249"></a><a - name="_Toc115416180">SECURITYLEVEL</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_SecurityLevel">SecurityLevel</a></p> - <p class=MsoList>Valid values : '1' or '0'</p> + <h6><a name="_Toc115416180"></a><a name="_Toc126872249"></a><a + name="_Toc139993172"></a><span style='mso-bookmark:_Toc115416180'>SECURITYLEVEL</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_SecurityLevel">SecurityLevel</a></p> + <p class=MsoList>Valid values    : '1' or '0'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:11'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993173"></a><a name="_Toc126872250"></a><a - name="_Toc115416181">SMBAUTHTYPE</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value___: smbAuthType">SMBAuthType</a></p> - <p class=MsoList>Valid values : '0','1' or '2'</p> + <h6><a name="_Toc115416181"></a><a name="_Toc126872250"></a><a + name="_Toc139993173"></a><span style='mso-bookmark:_Toc115416181'>SMBAUTHTYPE</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value___:_smbAuthType">SMBAuthType</a></p> + <p class=MsoList>Valid values    : '0','1' or '2'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:12'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993174"></a><a name="_Toc126872251"></a><a - name="_Toc115416182">STOREANSIFILENAMES</a></h6> - <p class=MsoList>Registry key : <a + <h6><a name="_Toc115416182"></a><a name="_Toc126872251"></a><a + name="_Toc139993174"></a><span style='mso-bookmark:_Toc115416182'>STOREANSIFILENAMES</span></h6> + <p class=MsoList>Registry key    : <a href="#_(OpenAFS_Client):">(OpenAFS Client)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value___: StoreAnsiFilenames">StoreAnsiFilenames</a></p> - <p class=MsoList>Valid values : '0' or '1'</p> + <p class=MsoList>Registry value : <a href="#_Value___:_StoreAnsiFilenames">StoreAnsiFilenames</a></p> + <p class=MsoList>Valid values    : '0' or '1'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:13;mso-yfti-lastrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993175"></a><a name="_Toc126872252"></a><a - name="_Toc115416183">USEDNS</a></h6> - <p class=MsoList>Registry key : <a - href="#_(Service_parameters):">(Service - parameters)</a></p> - <p class=MsoList>Registry value : <a - href="#_Value_:_UseDNS">UseDNS</a></p> - <p class=MsoList>Valid values : '1' or '0'</p> + <h6><a name="_Toc115416183"></a><a name="_Toc126872252"></a><a + name="_Toc139993175"></a><span style='mso-bookmark:_Toc115416183'>USEDNS</span></h6> + <p class=MsoList>Registry key    : <a + href="#_(Service_parameters):">(Service parameters)</a></p> + <p class=MsoList>Registry value : <a href="#_Value_:_UseDNS">UseDNS</a></p> + <p class=MsoList>Valid values    : '1' or '0'</p> </td> </tr> </table> @@ -2342,657 +2644,759 @@ name="_Toc115416184"></a><a name="_7.2.1.2.2_AFSCreds.exe_Properties"></a>7.2.1. AFSCreds.exe Properties</h5> <p class=MsoNormal>These properties are combined to add a command line option -to the shortcut that will be created in the Start:Programs:OpenAFS and -Start:Programs:Startup folders (see CREDSSTARTUP). The method of specifying -the option was chosen for easy integration with the Windows Installer user -interface. Although other methods can be used to specify options to -AFSCREDS.EXE, it is advised that they be avoided as transforms including such -options may not apply to future releases of OpenAFS.</p> +to the shortcut that will be created in the Start:Programs:OpenAFS and Start:Programs:Startup +folders (see CREDSSTARTUP).  The method of specifying the option was +chosen for easy integration with the Windows Installer user interface.  +Although other methods can be used to specify options to AFSCREDS.EXE, it is +advised that they be avoided as transforms including such options may not apply +to future releases of OpenAFS.</p> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993177"></a><a name="_Toc126872254"></a><a - name="_Toc115416185">CREDSSTARTUP</a></h6> - <p class=MsoList>Valid values : '1' or '0'</p> - <p class=MsoList>Controls whether AFSCreds.exe starts up automatically when - the user logs on. When CREDSSTARTUP is '1' a shortcut is added to the + <h6><a name="_Toc115416185"></a><a name="_Toc126872254"></a><a + name="_Toc139993177"></a><span style='mso-bookmark:_Toc115416185'>CREDSSTARTUP</span></h6> + <p class=MsoList>Valid values    : '1' or '0'</p> + <p class=MsoList>Controls whether AFSCreds.exe starts up automatically when the + user logs on.  When CREDSSTARTUP is '1' a shortcut is added to the 'Startup' folder in the 'Program menu' which starts AFSCREDS.EXE with the options that are determined by the other CREDS* properties.</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993178"></a><a name="_Toc126872255"></a><a - name="_Toc115416186">CREDSAUTOINIT</a></h6> - <p class=MsoList>Valid values : '-a' or ''</p> + <h6><a name="_Toc115416186"></a><a name="_Toc126872255"></a><a + name="_Toc139993178"></a><span style='mso-bookmark:_Toc115416186'>CREDSAUTOINIT</span></h6> + <p class=MsoList>Valid values    : '-a' or ''</p> <p class=MsoList>Enables automatic initialization.</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993179"></a><a name="_Toc126872256"></a><a - name="_Toc115416187">CREDSIPCHDET</a></h6> - <p class=MsoList>Valid values : '-n' or ''</p> + <h6><a name="_Toc115416187"></a><a name="_Toc126872256"></a><a + name="_Toc139993179"></a><span style='mso-bookmark:_Toc115416187'>CREDSIPCHDET</span></h6> + <p class=MsoList>Valid values    : '-n' or ''</p> <p class=MsoList>Enables IP address change detection.</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993180"></a><a name="_Toc126872257"></a><a - name="_Toc115416188">CREDSQUIET</a></h6> - <p class=MsoList>Valid values : '-q' or ''</p> + <h6><a name="_Toc115416188"></a><a name="_Toc126872257"></a><a + name="_Toc139993180"></a><span style='mso-bookmark:_Toc115416188'>CREDSQUIET</span></h6> + <p class=MsoList>Valid values    : '-q' or ''</p> <p class=MsoList>Enables quiet mode.</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993181"></a><a name="_Toc126872258"></a><a - name="_Toc115416189">CREDSRENEWDRMAP</a></h6> - <p class=MsoList>Valid values : '-m' or '’</p> + <h6><a name="_Toc115416189"></a><a name="_Toc126872258"></a><a + name="_Toc139993181"></a><span style='mso-bookmark:_Toc115416189'>CREDSRENEWDRMAP</span></h6> + <p class=MsoList>Valid values    : '-m' or '’</p> <p class=MsoList>Enables renewing drive map at startup.</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5;mso-yfti-lastrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h6><a name="_Toc139993182"></a><a name="_Toc126872259"></a><a - name="_Toc115416190">CREDSSHOW</a></h6> - <p class=MsoList>Valid values : '-s' or ''</p> + <h6><a name="_Toc115416190"></a><a name="_Toc126872259"></a><a + name="_Toc139993182"></a><span style='mso-bookmark:_Toc115416190'>CREDSSHOW</span></h6> + <p class=MsoList>Valid values    : '-s' or ''</p> <p class=MsoList>Enables displaying the credential manager window when AFSCREDS starts up.</p> </td> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993183"></a><a -name="_Toc126872260"></a><a name="_Toc115416191">7.2.2 Existing Registry -Entries</a></h3> +<h3><a name="_Toc115416191"></a><a name="_Toc139993183"></a><a +name="_Toc126872260"></a><span style='mso-bookmark:_Toc115416191'>7.2.2 +Existing Registry Entries</span></h3> -<p class=MsoNormal>You can change existing registry values subject to the -restrictions mentioned in the Windows Platform SDK. Pay special attention to -component key paths and try to only change the 'Value' column in the 'Registry' -table. If you want to add additional registry keys please refer to section 3 -(Additional resources).</p> +<p class=MsoNormal>You can change existing registry values subject to the restrictions +mentioned in the Windows Platform SDK.  Pay special attention to component +key paths and try to only change the 'Value' column in the 'Registry' +table.  If you want to add additional registry keys please refer to +section 3 (Additional resources).</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993184"></a><a -name="_Toc126872261"></a><a name="_Toc115416192">7.2.3 Replacing Configuration -Files</a></h3> +<h3><a name="_Toc115416192"></a><a name="_Toc139993184"></a><a +name="_Toc126872261"></a><span style='mso-bookmark:_Toc115416192'>7.2.3 +Replacing Configuration Files</span></h3> <p class=MsoNormal>The OpenAFS configuration files (CellServDB) can be replaced -by your own configuration files. These files are contained in separate MSI components -so that you can disable them individually.</p> +by your own configuration files.  These files are contained in separate +MSI components so that you can disable them individually.</p> <p class=MsoNormal>The recommended method for replacing these files is to first disable the components containing the configuration files that you want to -replace, and then add new components for the replacement files. This is +replace, and then add new components for the replacement files.  This is outlined below (assuming you are using ORCA.EXE to author the transform).</p> <p class=MsoNormal>Note that transforms are not a good way to add a new file as -an embedded stream. The method outlined here places the file in the same +an embedded stream.  The method outlined here places the file in the same directory as the MSI for deployment.</p> <p class=MsoNormal>The walkthrough below is to add a custom 'CellServDB' file.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:18.0pt;text-indent:-18.0pt'>1.<span style='font:7.0pt "Times New Roman"'>      -</span>Disable the component that contains the configuration file that you want -to replace.</p> +margin-left:18.0pt;text-indent:-18.0pt'>1.<span style='font-size:7.0pt; +font-family:"Times New Roman"'>      </span>Disable +the component that contains the configuration file that you want to replace.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:39.6pt;text-indent:-21.6pt'>1.1.<span style='font:7.0pt "Times New Roman"'>   -</span>Locate and select the 'Component' table in the 'Tables' list.</p> +margin-left:39.6pt;text-indent:-21.6pt'>1.1.<span style='font-size:7.0pt; +font-family:"Times New Roman"'>   </span>Locate and select the +'Component' table in the 'Tables' list.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:39.6pt;text-indent:-21.6pt'>1.2.<span style='font:7.0pt "Times New Roman"'>   -</span>In the Component table, locate the component you need to change ( Ctrl-F -invokes the 'Find' dialog). The component names are listed below in section <a -href="#_2.3.1_Components_for_Configuration ">7.2.3.1</a>. -For this example, the component name is 'elf_CellServDB'.</p> +margin-left:39.6pt;text-indent:-21.6pt'>1.2.<span style='font-size:7.0pt; +font-family:"Times New Roman"'>   </span>In the Component table, +locate the component you need to change ( Ctrl-F invokes the 'Find' +dialog).  The component names are listed below in section <a +href="#_2.3.1_Components_for_Configuration_">7.2.3.1</a>.  For this +example, the component name is 'elf_CellServDB'.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:39.6pt;text-indent:-21.6pt'>1.3.<span style='font:7.0pt "Times New Roman"'>   -</span>Go to the 'Condition' column of the component.</p> +margin-left:39.6pt;text-indent:-21.6pt'>1.3.<span style='font-size:7.0pt; +font-family:"Times New Roman"'>   </span>Go to the 'Condition' column +of the component.</p> <p class=MsoNormal style='margin-top:4.3pt;margin-right:0pt;margin-bottom:4.3pt; -margin-left:39.6pt;text-indent:-21.6pt'>1.4.<span style='font:7.0pt "Times New Roman"'>   -</span>Enter a condition that evaluates to false. I.e. 'DONOTINSTALL'. (Note -that an undefined property always evaluates to false).</p> +margin-left:39.6pt;text-indent:-21.6pt'>1.4.<span style='font-size:7.0pt; +font-family:"Times New Roman"'>   </span>Enter a condition that +evaluates to false. I.e. 'DONOTINSTALL'. (Note that an undefined property +always evaluates to false).</p> <p class=MsoNormal>Note that you can also use this step to disable other configuration files without providing replacements.</p> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'>2.<span -style='font:7.0pt "Times New Roman"'>      </span>Add -a new component containing the new configuration file.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Add a new component containing the new configuration file.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>2.1.<span -style='font:7.0pt "Times New Roman"'>   </span>Select the 'Component' -table in the 'Tables' list.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Select +the 'Component' table in the 'Tables' list.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>2.2.<span -style='font:7.0pt "Times New Roman"'>   </span>Select +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Select 'Tables'->'Add Row' (Ctrl-R).</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>2.3.<span -style='font:7.0pt "Times New Roman"'>   </span>Enter the following :</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Enter +the following :</p> -<table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 - style='margin-left:39.35pt;border-collapse:collapse;border:none'> - <tr style='height:23.35pt'> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 + style='margin-left:39.35pt;border-collapse:collapse;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:23.35pt'> <td width=115 valign=top style='width:86.25pt;border:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt;height:23.35pt'> - <p class=PreformattedText>Component</p> + <p class=preformattedtext>Component</p> </td> <td width=475 valign=top style='width:356.55pt;border:solid windowtext 1.0pt; border-left:none;padding:0pt 5.4pt 0pt 5.4pt;height:23.35pt'> - <p class=PreformattedText>cmf_my_CellServDB</p> + <p class=preformattedtext>cmf_my_CellServDB</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=115 valign=top style='width:86.25pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>ComponentID</p> + <p class=preformattedtext>ComponentID</p> </td> <td width=475 valign=top style='width:356.55pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>{7019836F-BB2C-4AF6-9463-0D6EC9035CF1}</p> + <p class=preformattedtext>{7019836F-BB2C-4AF6-9463-0D6EC9035CF1}</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=115 valign=top style='width:86.25pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Directory_</p> + <p class=preformattedtext>Directory_</p> </td> <td width=475 valign=top style='width:356.55pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>dirClient</p> + <p class=preformattedtext>dirClient</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=115 valign=top style='width:86.25pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Attributes</p> + <p class=preformattedtext>Attributes</p> </td> <td width=475 valign=top style='width:356.55pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>144</p> + <p class=preformattedtext>144</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=115 valign=top style='width:86.25pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Condition</p> + <p class=preformattedtext>Condition</p> </td> <td width=475 valign=top style='width:356.55pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText> </p> + <p class=preformattedtext> </p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5;mso-yfti-lastrow:yes'> <td width=115 valign=top style='width:86.25pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>KeyPath</p> + <p class=preformattedtext>KeyPath</p> </td> <td width=475 valign=top style='width:356.55pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>fil_my_CellServDB</p> + <p class=preformattedtext>fil_my_CellServDB</p> </td> </tr> </table> <p class=MsoNormal style='margin-left:35.45pt'>Note that the ComponentId is an -uppercase GUID. You can generate one using GUIDGEN.EXE or UUIDGEN.EXE, both of -which are included in the Platform SDK.</p> +uppercase GUID.  You can generate one using GUIDGEN.EXE or UUIDGEN.EXE, +both of which are included in the Platform SDK.</p> <p class=MsoNormal style='margin-left:35.45pt'>The Attributes value of 144 is a sum of msidbComponentAttributesPermanent (16) and -msidbComponentAttributesNeverOverwrite (128). This ensures that local +msidbComponentAttributesNeverOverwrite (128).  This ensures that local modifications are not overwritten or lost during an installation or -uninstallation. These are the same settings used on the default configuration files.</p> +uninstallation.  These are the same settings used on the default +configuration files.</p> -<p class=MsoNormal> 'fil_my_CellServDB' is a key into the 'File' -table which we will fill later.</p> +<p class=MsoNormal>            +'fil_my_CellServDB' is a key into the 'File' table which we will fill later.</p> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'>3.<span -style='font:7.0pt "Times New Roman"'>      </span>Add -a new feature to hold the new component.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Add a new feature to hold the new component.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>3.1.<span -style='font:7.0pt "Times New Roman"'>   </span>Select the 'Feature' -table.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Select +the 'Feature' table.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>3.2.<span -style='font:7.0pt "Times New Roman"'>   </span>Add a new row (Ctrl-R -or 'Tables'->'Add Row') with the following values:</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Add a +new row (Ctrl-R or 'Tables'->'Add Row') with the following values:</p> -<table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 - style='margin-left:40.1pt;border-collapse:collapse;border:none'> - <tr> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 + style='margin-left:40.1pt;border-collapse:collapse;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Feature</p> + <p class=preformattedtext>Feature</p> </td> <td width=462 valign=top style='width:346.2pt;border:solid windowtext 1.0pt; border-left:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>fea_my_CellServDB</p> + <p class=preformattedtext>fea_my_CellServDB</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Feature_Parent</p> + <p class=preformattedtext>Feature_Parent</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>feaClient</p> + <p class=preformattedtext>feaClient</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Title</p> + <p class=preformattedtext>Title</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText> </p> + <p class=preformattedtext> </p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Description</p> + <p class=preformattedtext>Description</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText> </p> + <p class=preformattedtext> </p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Display</p> + <p class=preformattedtext>Display</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>0</p> + <p class=preformattedtext>0</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Level</p> + <p class=preformattedtext>Level</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>30</p> + <p class=preformattedtext>30</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:6'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Directory_</p> + <p class=preformattedtext>Directory_</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText> </p> + <p class=preformattedtext> </p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:7;mso-yfti-lastrow:yes'> <td width=126 valign=top style='width:94.8pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Attributes</p> + <p class=preformattedtext>Attributes</p> </td> <td width=462 valign=top style='width:346.2pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>8</p> + <p class=preformattedtext>8</p> </td> </tr> </table> <p class=MsoNormal style='margin-left:35.45pt'>It is important to create the -new feature under the 'feaClient' feature, which will ensure that the configuration -file will be installed when the client binaries are installed.</p> +new feature under the 'feaClient' feature, which will ensure that the +configuration file will be installed when the client binaries are installed.</p> <p class=MsoNormal style='margin-left:35.45pt'>Setting 'Display' to 0 will hide -this feature from the feature selection dialog during an interactive installation. -A value of 30 for 'Level' allows this feature to be installed by default (on a -'Typical' installation).</p> +this feature from the feature selection dialog during an interactive +installation.  A value of 30 for 'Level' allows this feature to be +installed by default (on a 'Typical' installation).</p> -<p class=MsoNormal style='margin-left:35.45pt'>The 'Attributes' value is msidbFeatureAttributesDisallowAdvertise -(8), which is set on all features in the OpenAFS MSI. The OpenAFS MSI is not designed -for an advertised installation.</p> +<p class=MsoNormal style='margin-left:35.45pt'>The 'Attributes' value is +msidbFeatureAttributesDisallowAdvertise (8), which is set on all features in +the OpenAFS MSI.  The OpenAFS MSI is not designed for an advertised +installation.</p> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'>4.<span -style='font:7.0pt "Times New Roman"'>      </span>Join -the component and the feature.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Join the component and the feature.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>4.1.<span -style='font:7.0pt "Times New Roman"'>   </span>Select the -'FeatureComponents' table.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Select +the 'FeatureComponents' table.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>4.2.<span -style='font:7.0pt "Times New Roman"'>   </span>Add a new row with the -following values:</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Add a +new row with the following values:</p> -<table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 - style='margin-left:40.1pt;border-collapse:collapse;border:none'> - <tr> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 + style='margin-left:40.1pt;border-collapse:collapse;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Feature</p> + <p class=preformattedtext>Feature</p> </td> <td width=462 valign=top style='width:346.5pt;border:solid windowtext 1.0pt; border-left:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>fea_my_CellServDB</p> + <p class=preformattedtext>fea_my_CellServDB</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1;mso-yfti-lastrow:yes'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Component</p> + <p class=preformattedtext>Component</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>cmf_my_CellServDB</p> + <p class=preformattedtext>cmf_my_CellServDB</p> </td> </tr> </table> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'>5.<span -style='font:7.0pt "Times New Roman"'>      </span>Add -an entry to the 'File' table.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Add an entry to the 'File' table.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>5.1.<span -style='font:7.0pt "Times New Roman"'>   </span>Select the 'File' -table.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Select +the 'File' table.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>5.2.<span -style='font:7.0pt "Times New Roman"'>   </span>Add a new row with the -following values:</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Add a +new row with the following values:</p> -<table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 - style='margin-left:40.1pt;border-collapse:collapse;border:none'> - <tr> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 + style='margin-left:40.1pt;border-collapse:collapse;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>File</p> + <p class=preformattedtext>File</p> </td> <td width=462 valign=top style='width:346.5pt;border:solid windowtext 1.0pt; border-left:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>fil_my_CellServDB</p> + <p class=preformattedtext>fil_my_CellServDB</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Component_</p> + <p class=preformattedtext>Component_</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>cmf_my_CellServDB</p> + <p class=preformattedtext>cmf_my_CellServDB</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>FileName</p> + <p class=preformattedtext>FileName</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>CellServDB</p> + <p class=preformattedtext>CellServDB</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>FileSize</p> + <p class=preformattedtext>FileSize</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>(enter file size here)</p> + <p class=preformattedtext>(enter file size here)</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Attributes</p> + <p class=preformattedtext>Attributes</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>8192</p> + <p class=preformattedtext>8192</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5;mso-yfti-lastrow:yes'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>Sequence</p> + <p class=preformattedtext>Sequence</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>1000</p> + <p class=preformattedtext>1000</p> </td> </tr> </table> -<p class=MsoNormal> (leave other fields blank)</p> +<p class=MsoNormal>            +    (leave other fields blank)</p> <p class=MsoNormal style='margin-left:35.45pt'>The 'Attributes' value is -msidbFileAttributesNonCompressed (8192). This is because we will be placing -this file in the same directory as the MSI instead of embedding the file in -it. Transforms do not support updating compressed sources or adding new -cabinet streams.</p> +msidbFileAttributesNonCompressed (8192).  This is because we will be +placing this file in the same directory as the MSI instead of embedding the +file in it.  Transforms do not support updating compressed sources or +adding new cabinet streams.</p> <p class=MsoNormal style='margin-left:35.45pt'>Finally, the 'Sequence' value of -1000 will be used later to distinguish the file as being in a separate source location -than the other files in the MSI.</p> +1000 will be used later to distinguish the file as being in a separate source +location than the other files in the MSI.</p> <p class=MsoNormal style='margin-left:18.0pt;text-indent:-18.0pt'>6.<span -style='font:7.0pt "Times New Roman"'>      </span>Set -a media source for the file.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Set a media source for the file.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>6.1.<span -style='font:7.0pt "Times New Roman"'>   </span>Select the 'Media' -table.</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Select +the 'Media' table.</p> <p class=MsoNormal style='margin-left:39.6pt;text-indent:-21.6pt'>6.2.<span -style='font:7.0pt "Times New Roman"'>   </span>Add a row with the -following values :</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>   </span>Add a +row with the following values :</p> -<table class=MsoTableGrid border=1 cellspacing=0 cellpadding=0 - style='margin-left:40.1pt;border-collapse:collapse;border:none'> - <tr> +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 + style='margin-left:40.1pt;border-collapse:collapse;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>DiskId</p> + <p class=preformattedtext>DiskId</p> </td> <td width=462 valign=top style='width:346.5pt;border:solid windowtext 1.0pt; border-left:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>2</p> + <p class=preformattedtext>2</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1;mso-yfti-lastrow:yes'> <td width=126 valign=top style='width:94.5pt;border:solid windowtext 1.0pt; border-top:none;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>LastSequence</p> + <p class=preformattedtext>LastSequence</p> </td> <td width=462 valign=top style='width:346.5pt;border-top:none;border-left: none;border-bottom:solid windowtext 1.0pt;border-right:solid windowtext 1.0pt; padding:0pt 5.4pt 0pt 5.4pt'> - <p class=PreformattedText>1000</p> + <p class=preformattedtext>1000</p> </td> </tr> </table> -<p class=MsoNormal> (leave other fields blank)</p> +<p class=MsoNormal>            +    (leave other fields blank)</p> <p class=MsoNormal style='margin-left:35.45pt'>The sequence number of 1000 designates this as the media source for the newly added file.</p> <h4><a name="_Toc139993185"></a><a name="_Toc126872262"></a><a -name="_Toc115416193"></a><a name="_2.3.1_Components_for_Configuration "></a>7.2.3.1 +name="_Toc115416193"></a><a name="_2.3.1_Components_for_Configuration_"></a>7.2.3.1 Components for Configuration Files</h4> -<p class=PreformattedText style='text-indent:35.45pt'>CellServDB: +<p class=preformattedtext style='text-indent:35.45pt'>CellServDB: 'cpf_CellServDB' (ID {D5BA4C15-DBEC-4292-91FC-B54C30F24F2A})</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993186"></a><a -name="_Toc126872263"></a><a name="_Toc115416194">7.2.4 Adding Domain Specific -Registry Keys</a></h3> +<h3><a name="_Toc115416194"></a><a name="_Toc139993186"></a><a +name="_Toc126872263"></a><span style='mso-bookmark:_Toc115416194'>7.2.4 Adding +Domain Specific Registry Keys</span></h3> <p class=MsoNormal>Following is an example for adding domain specific registry keys.</p> -<p class=MsoNormal> Refer to <a -href="#_Appendix_A:_Registry_Values">Appendix A</a> -section 2.1 for more information.</p> +<p class=MsoNormal>    Refer to <a +href="#_Appendix_A:_Registry_Values">Appendix A</a> section 2.1 for more +information.</p> -<p class=MsoNormal> Columns that are unspecified should be left empty.</p> +<p class=MsoNormal>    Columns that are unspecified should be +left empty.</p> -<p class=MsoNormal> We create a new feature and component to hold the new -registry keys.</p> +<p class=MsoNormal>    We create a new feature and component to +hold the new registry keys.</p> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'Feature' table:</p> + <p class=MsoNormal>    'Feature' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Feature : 'feaDomainKeys'<br> - Feature Parent : 'feaClient'<br> - Display : 0<br> - Level : 30<br> - Attributes : 10</p> + <p class=MsoNormal>    +         (new row)<br> +             + Feature            : + 'feaDomainKeys'<br> +             Feature + Parent : 'feaClient'<br> +             + Display           : 0<br> +             + Level               + : 30<br> +             + Attributes        : 10</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'Component' table:</p> + <p class=MsoNormal>    'Component' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Component : 'rcm_DomainKeys'<br> - ComponentId : '{4E3FCBF4-8BE7-40B2-A108-C47CF743C627}'<br> - Directory : 'TARGETDIR'<br> - Attributes : 4<br> - KeyPath : 'reg_domkey0'</p> + <p class=MsoNormal>    +         (new row)<br> +             + Component     : 'rcm_DomainKeys'<br> +             + ComponentId  : '{4E3FCBF4-8BE7-40B2-A108-C47CF743C627}'<br> +             + Directory         : 'TARGETDIR'<br> +             + Attributes        : 4<br> +             + KeyPath          : 'reg_domkey0'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'FeatureComponents' table:</p> + <p class=MsoNormal>    'FeatureComponents' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Feature : 'feaDomainKeys'<br> - Component : 'rcm_DomainKeys'</p> + <p class=MsoNormal>    +         (new row)<br> +             + Feature            : + 'feaDomainKeys'<br> +             + Component     : 'rcm_DomainKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:6'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'Registry' table:</p> + <p class=MsoNormal>    'Registry' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:7'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey0'<br> - Root : 2<br> - Key : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'<br> - Component : 'rcm_DomainKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_domkey0'<br> +             + Root                + : 2<br> +             + Key                 + : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'<br> +             + Component     : 'rcm_DomainKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:8'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey1'<br> - Root : 2<br> - Key : - 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'<br> - Name : '*'<br> - Component : 'rcm_DomainKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_domkey1'<br> +             + Root                + : 2<br> +             + Key                 + : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain'<br> +             + Name              + : '*'<br> +             + Component     : 'rcm_DomainKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:9'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey2'<br> - Root : 2<br> - Key : + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_domkey2'<br> +             + Root                + : 2<br> +             + Key                 + : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'<br> - Name : '*'<br> - Component : 'rcm_DomainKeys'</p> +             + Name              + : '*'<br> +             + Component     : 'rcm_DomainKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:10'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey3'<br> - Root : 2<br> - Key : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'<br> - Name : 'LogonOptions'<br> - Value : 1<br> - Component : 'rcm_DomainKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_domkey3'<br> +             + Root                + : 2<br> +             + Key                 + : + 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\ATHENA.MIT.EDU'<br> +             + Name              + : 'LogonOptions'<br> +             + Value              + : 1<br> +             Component     + : 'rcm_DomainKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:11'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey4'<br> - Root : 2<br> - Key : SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br> - Name : '*'<br> - Component : 'rcm_DomainKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_domkey4'<br> +             + Root                + : 2<br> +             + Key                 + : + SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br> +             + Name              + : '*'<br> +             + Component     : 'rcm_DomainKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:12'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey5'<br> - Root : 2<br> - Key : + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_domkey5'<br> +             + Root                + : 2<br> +             + Key                 + : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br> +             + Name              + : 'LogonOptions'<br> +             + Value              + : 0<br> +             + Component     : 'rcm_DomainKeys'</p> + </td> + </tr> + <tr style='mso-yfti-irow:13;mso-yfti-lastrow:yes'> + <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> + <p class=MsoNormal style='margin-bottom:12.0pt'>            + (new row)<br> +             + Registry          : + 'reg_domkey6'<br> +             + Root                + : 2<br> +             + Key                 + : 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br> - Name : 'LogonOptions'<br> - Value : 0<br> - Component : 'rcm_DomainKeys'</p> - </td> - </tr> - <tr> - <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_domkey6'<br> - Root : 2<br> - Key : - 'SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST'<br> - Name : 'FailLoginsSilently'<br> - Value : 1<br> - Component : 'rcm_DomainKeys'<br> - <br> - </p> +             + Name              + : 'FailLoginsSilently'<br> +             + Value              + : 1<br> +             Component     + : 'rcm_DomainKeys'</p> </td> </tr> </table> @@ -3003,160 +3407,245 @@ registry keys.</p> (enable integrated logon) and 'LOCALHOST' (disable integrated logon and fail logins silently).</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993187"></a><a -name="_Toc126872264"></a><a name="_Toc115416195">7.2.5 Adding Site Specific -Freelance Registry Keys</a></h3> +<h3><a name="_Toc115416195"></a><a name="_Toc139993187"></a><a +name="_Toc126872264"></a><span style='mso-bookmark:_Toc115416195'>7.2.5 Adding +Site Specific Freelance Registry Keys</span></h3> <p class=MsoNormal>Following is an example for adding site specific Freelance registry keys to pre-populate the Mountpoints and Symlinks in the fake root.afs volume.</p> -<p class=MsoNormal> Columns that are unspecified should be left empty.</p> +<p class=MsoNormal>    Columns that are unspecified should be +left empty.</p> -<p class=MsoNormal> We create a new feature and component to hold the new -registry keys.</p> +<p class=MsoNormal>    We create a new feature and component to +hold the new registry keys.</p> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'Feature' table:</p> + <p class=MsoNormal>    'Feature' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Feature : 'feaFreelanceKeys'<br> - Feature Parent : 'feaClient'<br> - Display : 0<br> - Level : 30<br> - Attributes : 10</p> + <p class=MsoNormal>    +         (new row)<br> +             + Feature            : + 'feaFreelanceKeys'<br> +             Feature + Parent : 'feaClient'<br> +             + Display           : 0<br> +             + Level               + : 30<br> +             + Attributes        : 10</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:2'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'Component' table:</p> + <p class=MsoNormal>    'Component' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:3'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Component : 'rcm_FreelanceKeys'<br> - ComponentId : '{4E3B3CBF4-9AE7-40C3-7B09-C48CF842C583}'<br> - Directory : 'TARGETDIR'<br> - Attributes : 4<br> - KeyPath : 'reg_freekey0'</p> + <p class=MsoNormal>    +         (new row)<br> +             + Component     : 'rcm_FreelanceKeys'<br> +             + ComponentId  : '{4E3B3CBF4-9AE7-40C3-7B09-C48CF842C583}'<br> +             + Directory         : 'TARGETDIR'<br> +             + Attributes        : 4<br> +             + KeyPath          : + 'reg_freekey0'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:4'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'FeatureComponents' table:</p> + <p class=MsoNormal>    'FeatureComponents' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:5'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Feature : 'feaFreelanceKeys'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>    +         (new row)<br> +             + Feature            : + 'feaFreelanceKeys'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:6'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> 'Registry' table:</p> + <p class=MsoNormal>    'Registry' table:</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:7'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_freekey0'<br> - Root : 2<br> - Key : 'SOFTWARE\OpenAFS\Client\Freelance'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_freekey0'<br> +             + Root                + : 2<br> +             + Key                 + : 'SOFTWARE\OpenAFS\Client\Freelance'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:8'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_freekey1'<br> - Root : 2<br> - Key : 'SOFTWARE\OpenAFS\Client\Freelance'<br> - Name : '0'<br> - Value : 'athena.mit.edu#athena.mit.edu:root.cell.'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_freekey1'<br> +             + Root                + : 2<br> +             + Key                 + : 'SOFTWARE\OpenAFS\Client\Freelance'<br> +             + Name              + : '0'<br> +             + Value           +    : 'athena.mit.edu#athena.mit.edu:root.cell.'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:9'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_freekey2'<br> - Root : 2<br> - Key : 'SOFTWARE\OpenAFS\Client\Freelance'<br> - Name : '1'<br> - Value : '.athena.mit.edu%athena.mit.edu:root.cell.'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_freekey2'<br> +             + Root                + : 2<br> +             + Key                 + : 'SOFTWARE\OpenAFS\Client\Freelance'<br> +             + Name              + : '1'<br> +             + Value           +    : '.athena.mit.edu%athena.mit.edu:root.cell.'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:10'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_freekey3'<br> - Root : 2<br> - Key : 'SOFTWARE\OpenAFS\Client\Freelance\Symlinks'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_freekey3'<br> +             + Root                + : 2<br> +             Key                 + : 'SOFTWARE\OpenAFS\Client\Freelance\Symlinks'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:11'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_freekey4'<br> - Root : 2<br> - Key : 'SOFTWARE\OpenAFS\Client\Freelance\Symlinks'<br> - Name : '0'<br> - Value : 'athena:athena.mit.edu.'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_freekey4'<br> +             + Root                + : 2<br> +             + Key                 + : 'SOFTWARE\OpenAFS\Client\Freelance\Symlinks'<br> +             + Name              + : '0'<br> +             + Value           +    : 'athena:athena.mit.edu.'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:12;mso-yfti-lastrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <p class=MsoNormal> (new row)<br> - Registry : 'reg_freekey5'<br> - Root : 2<br> - Key : 'SOFTWARE\OpenAFS\Client\Freelance\Symlinks'<br> - Name : '1'<br> - Value : '.athena:.athena.mit.edu.'<br> - Component : 'rcm_FreelanceKeys'</p> + <p class=MsoNormal>            + (new row)<br> +             + Registry          : + 'reg_freekey5'<br> +             + Root                + : 2<br> +             + Key                 + : 'SOFTWARE\OpenAFS\Client\Freelance\Symlinks'<br> +             + Name              + : '1'<br> +             + Value           +    : '.athena:.athena.mit.edu.'<br> +             + Component     : 'rcm_FreelanceKeys'</p> </td> </tr> </table> <p class=MsoNormal>The example adds a read-only mountpoint to the -athena.mit.edu cell's root.afs volume as well as a read-write mountpoint. +athena.mit.edu cell's root.afs volume as well as a read-write mountpoint.  Aliases are also provided using symlinks.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993188"></a><a -name="_Toc126872265"></a><a name="_Toc115417101"></a><a name="_Toc115416196"></a><a -name="_Ref115275867">7.3 Additional Resources</a></h2> +<h2><a name="_Ref115275867"></a><a name="_Toc139993188"></a><a +name="_Toc126872265"></a><a name="_Toc115417101"></a><a name="_Toc115416196"></a><span +style='mso-bookmark:_Ref115275867'>7.3 Additional Resources</span></h2> <p class=MsoNormal>If you want to add registry keys or files you need to create -new components and features for those. Refer to the Windows Platform SDK for -details.</p> +new components and features for those.  Refer to the Windows Platform SDK +for details.</p> <p class=MsoNormal>It is beyond the scope of this document to provide a -comprehensive overview of how to add new resources through a transform. Please -refer to the "Windows Installer" documentation for details. The relevant -section is at :</p> +comprehensive overview of how to add new resources through a transform.  +Please refer to the "Windows Installer" documentation for +details.  The relevant section is at :</p> <p class=MsoNormal>http://msdn.microsoft.com/library/en-us/msi/setup/using_transforms_to_add_resources.asp</p> <p class=MsoNormal>A sample walkthrough of adding a new configuration file is in section 2.3.</p> -<p class=MsoNormal>Add new features under the 'feaClient' or 'feaServer' as appropriate -and set the 'Level' column for those features to equal the 'Level' for their -parent features for consistency. Note that none of the features in the OpenAFS -for Windows MSI package are designed to be installed to run from 'source' or -'advertised'. It is recommended that you set +<p class=MsoNormal>Add new features under the 'feaClient' or 'feaServer' as +appropriate and set the 'Level' column for those features to equal the 'Level' +for their parent features for consistency.  Note that none of the features +in the OpenAFS for Windows MSI package are designed to be installed to run from +'source' or 'advertised'.  It is recommended that you set 'msidbFeatureAttributesFavorLocal' (0), 'msidbFeatureAttributesFollowParent' -(2) and 'msidbFeatureAttributesDisallowAdvertise' (8) attributes for new features.</p> +(2) and 'msidbFeatureAttributesDisallowAdvertise' (8) attributes for new +features.</p> <p class=MsoNormal>If you are creating new components, retain the same component GUID when creating new transforms against new releases of the OpenAFS @@ -3166,106 +3655,110 @@ MSI package.</p> ORCA.EXE you can generate a transform with MSITRAN.EXE as follows :</p> <p class=MsoNormal>(Modified MSI package is 'openafs-en_US_new.msi' and the -original MSI package is 'openafs-en_US.msi'. Generates transform 'openafs-transform.mst')</p> +original MSI package is 'openafs-en_US.msi'.  Generates transform +'openafs-transform.mst')</p> -<p class=MsoNormal> > msitran.exe -g openafs-en_US.msi +<p class=MsoNormal>    > msitran.exe -g openafs-en_US.msi openafs-en_US_new.msi openafs-transform.mst</p> <p class=MsoNormal>See the Platform SDK documentation for information on command line options for MSITRAN.EXE.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993189"></a><a -name="_Toc126872266"></a><a name="_Toc115417102"></a><a name="_Toc115416197">7.4. -Upgrades</a></h2> +<h2><a name="_Toc115416197"></a><a name="_Toc139993189"></a><a +name="_Toc126872266"></a><a name="_Toc115417102"></a><span style='mso-bookmark: +_Toc115416197'>7.4. Upgrades</span></h2> <p class=MsoNormal>The MSI package is designed to uninstall previous versions -of OpenAFS for Windows during installation. Note that it doesn't directly -upgrade an existing installation. This is intentional and ensures that +of OpenAFS for Windows during installation.  Note that it doesn't directly +upgrade an existing installation.  This is intentional and ensures that development releases which do not have strictly increasing version numbers are properly upgraded.</p> -<p class=MsoNormal>Versions of OpenAFS that are upgraded by the MSI package are:</p> +<p class=MsoNormal>Versions of OpenAFS that are upgraded by the MSI package +are:</p> <p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'>1)<span -style='font:7.0pt "Times New Roman"'>      </span>OpenAFS -MSI package<br> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>OpenAFS MSI package<br> Upgrade code {6823EEDD-84FC-4204-ABB3-A80D25779833}<br> Up to current release</p> <p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'>2)<span -style='font:7.0pt "Times New Roman"'>      </span>MIT's -Transarc AFS MSI package<br> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>MIT's Transarc AFS MSI package<br> Upgrade code {5332B94F-DE38-4927-9EAB-51F4A64193A7}<br> Up to version 3.6.2</p> <p class=MsoNormal style='margin-left:36.0pt;text-indent:-18.0pt'>3)<span -style='font:7.0pt "Times New Roman"'>      </span>OpenAFS -NSIS package<br> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>OpenAFS NSIS package<br> All versions</p> <p class=MsoNormal>Note that versions of the OpenAFS NSIS package prior to -1.3.65 had a bug where it couldn't be uninstalled properly in unattended mode. -Therefore the MSI package will not try to uninstall an OpenAFS NSIS package if -running unattended. This means that group policy based deployments will fail -on machines that have the OpenAFS NSIS package installed.</p> +1.3.65 had a bug where it couldn't be uninstalled properly in unattended +mode.  Therefore the MSI package will not try to uninstall an OpenAFS NSIS +package if running unattended.  This means that group policy based deployments +will fail on machines that have the OpenAFS NSIS package installed.</p> <p class=MsoNormal>If you have used a different MSI package to install OpenAFS -and wish to upgrade it you can author rows into the 'Upgrade' table as described -in the Platform SDK.</p> +and wish to upgrade it you can author rows into the 'Upgrade' table as +described in the Platform SDK.</p> <p class=MsoNormal>When performing an upgrade with msiexec.exe execute the MSI with the repair options "vomus".</p> -<h1 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993190"></a><a -name="_Toc126872267"></a><a name="_Toc115417116"></a><a name="_Toc115417103"></a><a -name="_Toc115416198"></a><a name="_Appendix_A:_Registry_Values"></a>Appendix A: -Registry Values</h1> +<h1><a name="_Toc139993190"></a><a name="_Toc126872267"></a><a +name="_Toc115417116"></a><a name="_Toc115417103"></a><a name="_Toc115416198"></a><a +name="_Appendix_A:_Registry_Values"></a>Appendix A: Registry Values</h1> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993191"></a><a -name="_Toc126872268"></a><a name="_Toc115417104"></a><a name="_Toc115416199">A.1. -Service parameters</a></h2> +<h2><a name="_Toc115416199"></a><a name="_Toc139993191"></a><a +name="_Toc126872268"></a><a name="_Toc115417104"></a><span style='mso-bookmark: +_Toc115416199'>A.1. Service parameters</span></h2> <p class=MsoBodyText>The service parameters primarily affect the behavior of the AFS client service (afsd_service.exe).</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993192"></a><a -name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> -[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</a></h3> +<h3><a name="_Toc115416200"></a><a name="_Toc139993192"></a><a +name="_Toc126872269"></a><span style='mso-bookmark:_Toc115416200'>Regkey:<br> +[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:145.25pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:145.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:145.25pt'> - <h5><a name="_Toc139993193"></a><a name="_Toc126872270"></a><a - name="_Toc115416201">Value: LANadapter</a></h5> + <h5><a name="_Toc115416201"></a><a name="_Toc126872270"></a><a + name="_Toc139993193"></a><span style='mso-bookmark:_Toc115416201'>Value: + LANadapter</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: -1<br> Variable: LANadapter</p> - <p class=MsoBodyText>LAN adapter number to use. This is the lana number of - the LAN adapter that the SMB server should bind to. If unspecified or set to - -1, a LAN adapter with named 'AFS' or a loopback adapter will be selected. - If neither are present, then all available adapters will be bound to. When - binding to a non-loopback adapter, the NetBIOS name hostname%-AFS' will be - used (where %hostname% is the NetBIOS name of the host truncated to 11 - characters). Otherwise, the NetBIOS name will be 'AFS'.</p> + <p class=MsoBodyText>LAN adapter number to use.  This is the lana number + of the LAN adapter that the SMB server should bind to.  If unspecified + or set to -1, a LAN adapter with named 'AFS' or a loopback adapter will be + selected.  If neither are present, then all available adapters will be + bound to.  When binding to a non-loopback adapter, the NetBIOS name + hostname%-AFS' will be used (where %hostname% is the NetBIOS name of the host + truncated to 11 characters). Otherwise, the NetBIOS name will be 'AFS'.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:1;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993194"></a><a name="_Toc126872271"></a><a - name="_Toc115416202"></a><a name="_Value___: CacheSize"></a>Value: CacheSize</h5> + <h5><a name="_Value___:_CacheSize"></a><a name="_Toc115416202"></a><a + name="_Toc126872271"></a><a name="_Toc139993194"></a>Value: CacheSize</h5> <p class=MsoBodyText>Type: DWORD<br> Default: 98304 (CM_CONFIGDEFAULT_CACHESIZE)<br> Variable: cm_initParams.cacheSize</p> <p class=MsoBodyText>Size of the AFS cache in 1k blocks.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:2;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993195"></a><a name="_Toc126872272"></a><a - name="_Toc115416203">Value: ChunkSize</a></h5> + <h5><a name="_Toc115416203"></a><a name="_Toc126872272"></a><a + name="_Toc139993195"></a><span style='mso-bookmark:_Toc115416203'>Value: + ChunkSize</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 17 (CM_CONFIGDEFAULT_CHUNKSIZE)<br> Variable: cm_logChunkSize (cm_chunkSize = 1 << cm_logChunkSize)</p> @@ -3273,11 +3766,12 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> is 2^cm_logChunkSize.</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:3;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993196"></a><a name="_Toc126872273"></a><a - name="_Toc115416204">Value: Daemons</a></h5> + <h5><a name="_Toc115416204"></a><a name="_Toc126872273"></a><a + name="_Toc139993196"></a><span style='mso-bookmark:_Toc115416204'>Value: + Daemons</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 2 (CM_CONFIGDEFAULT_DAEMONS)<br> Variable: numBkgD</p> @@ -3285,11 +3779,12 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> cm_BkgDaemon). (see cm_BkgDaemon in cm_daemon.c)</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:4;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993197"></a><a name="_Toc126872274"></a><a - name="_Toc115416205">Value: ServerThreads</a></h5> + <h5><a name="_Toc115416205"></a><a name="_Toc126872274"></a><a + name="_Toc139993197"></a><span style='mso-bookmark:_Toc115416205'>Value: + ServerThreads</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 25 (CM_CONFIGDEFAULT_SVTHREADS)<br> Variable: numSvThreads</p> @@ -3297,91 +3792,96 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> smb_Server). (see smb_Server in smb.c).</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:5;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993198"></a><a name="_Toc126872275"></a><a - name="_Toc115416206">Value: Stats</a></h5> + <h5><a name="_Toc115416206"></a><a name="_Toc126872275"></a><a + name="_Toc139993198"></a><span style='mso-bookmark:_Toc115416206'>Value: + Stats</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 10000 (CM_CONFIGDEFAULT_STATS)<br> Variable: cm_initParams.nStatCaches</p> <p class=MsoBodyText>Cache configuration.</p> </td> </tr> - <tr style='height:78.5pt'> + <tr style='mso-yfti-irow:6;height:78.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:78.5pt'> - <h5><a name="_Toc139993199"></a><a name="_Toc126872276"></a><a - name="_Toc115416207"></a><a name="_Value_:_LogoffPreserveTokens"></a>Value: + <h5><a name="_Value_:_LogoffPreserveTokens"></a><a name="_Toc115416207"></a><a + name="_Toc126872276"></a><a name="_Toc139993199"></a>Value: LogoffPreserveTokens</h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default : 0</p> <p class=MsoBodyText>If enabled (set to 1), the Logoff Event handler will not - attempt to delete the user's tokens if the user's profile is stored outside - of AFS.</p> + attempt to delete the user's tokens  if the user's profile is stored + outside of AFS.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:7;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993200"></a><a name="_Toc126872277"></a><a - name="_Toc115416208">Value: RootVolume</a></h5> + <h5><a name="_Toc115416208"></a><a name="_Toc126872277"></a><a + name="_Toc139993200"></a><span style='mso-bookmark:_Toc115416208'>Value: + RootVolume</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: "root.afs"<br> Variable: cm_rootVolumeName</p> <p class=MsoBodyText>Root volume name.</p> </td> </tr> - <tr style='height:145.25pt'> + <tr style='mso-yfti-irow:8;height:145.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:145.25pt'> - <h5><a name="_Toc139993201"></a><a name="_Toc126872278"></a><a - name="_Toc115416209"></a><a name="_Value_:_Mountroot"></a>Value: Mountroot</h5> + <h5><a name="_Value_:_Mountroot"></a><a name="_Toc115416209"></a><a + name="_Toc126872278"></a><a name="_Toc139993201"></a>Value: Mountroot</h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: "/afs"<br> Variable: cm_mountRoot</p> - <p class=MsoBodyText>Name of root mount point. In symlinks, if a path starts - with cm_mountRoot, it is assumed that the path is absolute (as opposed to - relative) and is adjusted accordingly. Eg: if a path is specified as + <p class=MsoBodyText>Name of root mount point.  In symlinks, if a path + starts with cm_mountRoot, it is assumed that the path is absolute (as opposed + to relative) and is adjusted accordingly. Eg: if a path is specified as /afs/athena.mit.edu/foo/bar/baz and cm_mountRoot is "/afs", then - the path is interpreted as \\afs\all\athena.mit.edu\foo\bar\baz. If a path - does not start with with cm_mountRoot, the path is assumed to be relative and - suffixed to the reference directory (i.e. directory where the symlink exists)</p> + the path is interpreted as \\afs\all\athena.mit.edu\foo\bar\baz.  If a + path does not start with with cm_mountRoot, the path is assumed to be + relative and suffixed to the reference directory (i.e. directory where the + symlink exists)</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:9;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993202"></a><a name="_Toc126872279"></a><a - name="_Toc115416210"></a><a name="_Value_:_CachePath"></a>Value: CachePath</h5> + <h5><a name="_Value_:_CachePath"></a><a name="_Toc115416210"></a><a + name="_Toc126872279"></a><a name="_Toc139993202"></a>Value: CachePath</h5> <p class=MsoBodyText>Type: REG_SZ or REG_EXPAND_SZ<br> Default: "%TEMP%\AFSCache"<br> Variable: cm_CachePath</p> - <p class=MsoBodyText>Location of on-disk cache file. The default is the - SYSTEM account's TEMP directory. The attributes assigned to the file are - HIDDEN and SYSTEM.</p> + <p class=MsoBodyText>Location of on-disk cache file.  The default is the + SYSTEM account's TEMP directory.  The attributes assigned to the file + are HIDDEN and SYSTEM.</p> </td> </tr> - <tr style='height:119.0pt'> + <tr style='mso-yfti-irow:10;height:119.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:119.0pt'> - <h5><a name="_Toc139993203"></a><a name="_Toc126872280"></a><a - name="_Toc115416211">Value: NonPersistentCaching</a></h5> + <h5><a name="_Toc115416211"></a><a name="_Toc126872280"></a><a + name="_Toc139993203"></a><span style='mso-bookmark:_Toc115416211'>Value: + NonPersistentCaching</span></h5> <p class=MsoBodyText>Type: DWORD [0..1]<br> Default: 0<br> Variable: buf_CacheType</p> <p class=MsoBodyText>When this registry value is set to a non-zero value, the CachePath value is ignored and the cache data is stored in the windows paging - file. This prevents the use of persistent caching (when available) as well - as the ability to alter the size of the cache at runtime using the "fs - setcachesize" command.</p> + file.  This prevents the use of persistent caching (when available) as + well as the ability to alter the size of the cache at runtime using the + "fs setcachesize" command.</p> </td> </tr> - <tr style='height:125.5pt'> + <tr style='mso-yfti-irow:11;height:125.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:125.5pt'> - <h5><a name="_Toc139993204"></a><a name="_Toc126872281"></a><a - name="_Toc115416212">Value: ValidateCache</a></h5> + <h5><a name="_Toc115416212"></a><a name="_Toc126872281"></a><a + name="_Toc139993204"></a><span style='mso-bookmark:_Toc115416212'>Value: + ValidateCache</span></h5> <p class=MsoBodyText>Type: DWORD [0..2]<br> Default: 1<br> Variable: buf_CacheType</p> @@ -3392,11 +3892,12 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> 2 - Validation is performed at shutdown</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:12;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993205"></a><a name="_Toc126872282"></a><a - name="_Toc115416213">Value: TrapOnPanic</a></h5> + <h5><a name="_Toc115416213"></a><a name="_Toc126872282"></a><a + name="_Toc139993205"></a><span style='mso-bookmark:_Toc115416213'>Value: + TrapOnPanic</span></h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 0<br> Variable: traceOnPanic</p> @@ -3404,93 +3905,92 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> (breakpoint: _asm int 3).</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:13;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993206"></a><a name="_Toc126872283"></a><a - name="_Toc115416214"></a><a name="_Value___: NetbiosName"></a>Value: - NetbiosName</h5> + <h5><a name="_Value___:_NetbiosName"></a><a name="_Toc115416214"></a><a + name="_Toc126872283"></a><a name="_Toc139993206"></a>Value: NetbiosName</h5> <p class=MsoBodyText>Type: REG_EXPAND_SZ<br> Default: "AFS"<br> Variable: cm_NetbiosName</p> <p class=MsoBodyText>Specifies the NetBIOS name to be used when binding to a - Loopback adapter. To provide the old behavior specify a value of + Loopback adapter.  To provide the old behavior specify a value of  "%COMPUTERNAME%-AFS".</p> </td> </tr> - <tr style='height:152.0pt'> + <tr style='mso-yfti-irow:14;height:152.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:152.0pt'> - <h5><a name="_Toc139993207"></a><a name="_Toc126872284"></a><a - name="_Toc115416215">Value: IsGateway</a></h5> + <h5><a name="_Toc115416215"></a><a name="_Toc126872284"></a><a + name="_Toc139993207"></a><span style='mso-bookmark:_Toc115416215'>Value: + IsGateway</span></h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 0<br> Variable: isGateway</p> <p class=MsoBodyText>Select whether or not this AFS client should act as a - gateway. If set and the NetBIOS name hostname-AFS is bound to a physical - NIC, other machines in the subnet can access AFS via SMB connections to - hostname-AFS.</p> + gateway.  If set and the NetBIOS name hostname-AFS is bound to a + physical NIC, other machines in the subnet can access AFS via SMB connections + to hostname-AFS.</p> <p class=MsoBodyText>When IsGateway is non-zero, the LAN adapter detection - code will avoid binding to a loopback adapter. This will ensure that the NetBIOS - name will be of the form hostname-AFS instead of the value set by the - "NetbiosName" registry value.</p> + code will avoid binding to a loopback adapter.  This will ensure that + the NetBIOS name will be of the form hostname-AFS instead of the value set by + the "NetbiosName" registry value.</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:15;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993208"></a><a name="_Toc126872285"></a><a - name="_Toc115416216">Value: ReportSessionStartups</a></h5> + <h5><a name="_Toc115416216"></a><a name="_Toc126872285"></a><a + name="_Toc139993208"></a><span style='mso-bookmark:_Toc115416216'>Value: + ReportSessionStartups</span></h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 0<br> Variable: reportSessionStartups</p> <p class=MsoBodyText>If enabled, all SMB sessions created are recorded in the - Application event log. This also enables other events such as drive mappings - or various error types to be logged.</p> + Application event log.  This also enables other events such as drive + mappings or various error types to be logged.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:16;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993209"></a><a name="_Toc126872286"></a><a - name="_Toc115416217"></a><a name="_Value_:_TraceBufferSize"></a>Value: - TraceBufferSize</h5> + <h5><a name="_Value_:_TraceBufferSize"></a><a name="_Toc115416217"></a><a + name="_Toc126872286"></a><a name="_Toc139993209"></a>Value: TraceBufferSize</h5> <p class=MsoBodyText>Type: DWORD<br> Default: 5000 (CM_CONFIGDEFAULT_TRACEBUFSIZE)<br> Variable: traceBufSize</p> <p class=MsoBodyText>Number of entries to keep in trace log.</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:17;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993210"></a><a name="_Toc126872287"></a><a - name="_Toc115416218"></a><a name="_Value_:_SysName"></a>Value: SysName</h5> + <h5><a name="_Value_:_SysName"></a><a name="_Toc115416218"></a><a + name="_Toc126872287"></a><a name="_Toc139993210"></a>Value: SysName</h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: "i386_nt40"<br> Variable: cm_sysName</p> - <p class=MsoBodyText>Provides an initial value for "fs sysname". - The string can contain one or more replacement values for @sys in order of - preference separated by whitespace.</p> + <p class=MsoBodyText>Provides an initial value for "fs + sysname".  The string can contain one or more replacement values + for @sys in order of preference separated by whitespace.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:18;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993211"></a><a name="_Toc126872288"></a><a - name="_Toc115416219"></a><a name="_Value_:_SecurityLevel"></a>Value: - SecurityLevel</h5> + <h5><a name="_Value_:_SecurityLevel"></a><a name="_Toc115416219"></a><a + name="_Toc126872288"></a><a name="_Toc139993211"></a>Value: SecurityLevel</h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 0<br> Variable: cryptall</p> <p class=MsoBodyText>Enables encryption on RX calls.</p> </td> </tr> - <tr style='height:112.25pt'> + <tr style='mso-yfti-irow:19;height:112.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:112.25pt'> - <h5><a name="_Toc139993212"></a><a name="_Toc126872289"></a><a - name="_Toc115416220"></a><a name="_Value_:_UseDNS"></a>Value: UseDNS</h5> + <h5><a name="_Value_:_UseDNS"></a><a name="_Toc115416220"></a><a + name="_Toc126872289"></a><a name="_Toc139993212"></a>Value: UseDNS</h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 1<br> Variable: cm_dnsEnabled</p> @@ -3500,37 +4000,36 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> above.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:20;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993213"></a><a name="_Toc126872290"></a><a - name="_Toc115416221"></a><a name="_Value_:_FreelanceClient"></a>Value: - FreelanceClient</h5> + <h5><a name="_Value_:_FreelanceClient"></a><a name="_Toc115416221"></a><a + name="_Toc126872290"></a><a name="_Toc139993213"></a>Value: FreelanceClient</h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 0<br> Variable: cm_freelanceEnabled</p> <p class=MsoBodyText>Enables freelance client.</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:21;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993214"></a><a name="_Toc126872291"></a><a - name="_Toc115416222"></a><a name="_Value_:_HideDotFiles"></a>Value: - HideDotFiles</h5> + <h5><a name="_Value_:_HideDotFiles"></a><a name="_Toc115416222"></a><a + name="_Toc126872291"></a><a name="_Toc139993214"></a>Value: HideDotFiles</h5> <p class=MsoBodyText>Type: DWORD {1,0}<br> Default: 1<br> Variable: smb_hideDotFiles</p> - <p class=MsoBodyText>Enables marking dotfiles with the hidden attribute. Dot - files are files whose name starts with a period (excluding "." and - "..").</p> + <p class=MsoBodyText>Enables marking dotfiles with the hidden + attribute.  Dot files are files whose name starts with a period + (excluding "." and "..").</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:22;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993215"></a><a name="_Toc126872292"></a><a - name="_Toc115416223">Value: MaxMpxRequests</a></h5> + <h5><a name="_Toc115416223"></a><a name="_Toc126872292"></a><a + name="_Toc139993215"></a><span style='mso-bookmark:_Toc115416223'>Value: + MaxMpxRequests</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 50<br> Variable: smb_maxMpxRequests</p> @@ -3538,22 +4037,23 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> made.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:23;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993216"></a><a name="_Toc126872293"></a><a - name="_Toc115416224">Value: MaxVCPerServer</a></h5> + <h5><a name="_Toc115416224"></a><a name="_Toc126872293"></a><a + name="_Toc139993216"></a><span style='mso-bookmark:_Toc115416224'>Value: + MaxVCPerServer</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 100<br> Variable: smb_maxVCPerServer</p> <p class=MsoBodyText>Maximum number of SMB virtual circuits.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:24;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993217"></a><a name="_Toc126872294"></a><a - name="_Toc115416225"></a><a name="_Value_:_Cell"></a>Value: Cell</h5> + <h5><a name="_Value_:_Cell"></a><a name="_Toc115416225"></a><a + name="_Toc126872294"></a><a name="_Toc139993217"></a>Value: Cell</h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none><br> Variable: rootCellName</p> @@ -3561,23 +4061,24 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> be mounted in \\afs\all).</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:25;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993218"></a><a name="_Toc126872295"></a><a - name="_Toc115416226">Value: RxNoJumbo</a></h5> + <h5><a name="_Toc115416226"></a><a name="_Toc126872295"></a><a + name="_Toc139993218"></a><span style='mso-bookmark:_Toc115416226'>Value: + RxNoJumbo</span></h5> <p class=MsoBodyText>Type: DWORD {0,1}<br> Default: 0<br> Variable: rx_nojumbo</p> - <p class=MsoBodyText>If enabled, does not send or indicate that we are able - to send or receive RX jumbograms.</p> + <p class=MsoBodyText>If enabled, does not send or indicate that we are able to + send or receive RX jumbograms.</p> </td> </tr> - <tr style='height:124.75pt'> + <tr style='mso-yfti-irow:26;height:124.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:124.75pt'> - <h5><a name="_Toc139993219"></a><a name="_Toc126872296"></a><a - name="_Toc115416227"></a><a name="_Value_:_RxMaxMTU"></a>Value: RxMaxMTU</h5> + <h5><a name="_Value_:_RxMaxMTU"></a><a name="_Toc115416227"></a><a + name="_Toc126872296"></a><a name="_Toc139993219"></a>Value: RxMaxMTU</h5> <p class=MsoBodyText>Type: DWORD<br> Default: -1<br> Variable: rx_mtu</p> @@ -3587,12 +4088,11 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> IPSec VPN client, this value must be set to 1264 or smaller.</p> </td> </tr> - <tr style='height:151.75pt'> + <tr style='mso-yfti-irow:27;height:151.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:151.75pt'> - <h5><a name="_Toc139993220"></a><a name="_Toc126872297"></a><a - name="_Toc115416228"></a><a name="_Value:_ConnDeadTimeout"></a>Value: - ConnDeadTimeout</h5> + <h5><a name="_Value:_ConnDeadTimeout"></a><a name="_Toc115416228"></a><a + name="_Toc126872297"></a><a name="_Toc139993220"></a>Value: ConnDeadTimeout</h5> <p class=MsoBodyText>Type: DWORD<br> Default: 60 (seconds)<br> Variable: ConnDeadtimeout</p> @@ -3601,33 +4101,35 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> [HKLM\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters] SessTimeout</p> <p class=MsoBodyText>If the minimum SMB timeout is not specified the value is - 45 seconds. See <a + 45 seconds.  See <a href="http://support.microsoft.com/support/kb/articles/Q102/0/67.asp">http://support.microsoft.com:80/support/kb/articles/Q102/0/67.asp</a></p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:28;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993221"></a><a name="_Toc126872298"></a><a - name="_Toc115416229">Value: HardDeadTimeout</a></h5> + <h5><a name="_Toc115416229"></a><a name="_Toc126872298"></a><a + name="_Toc139993221"></a><span style='mso-bookmark:_Toc115416229'>Value: + HardDeadTimeout</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 120 (seconds)<br> Variable: HardDeadtimeout</p> <p class=MsoBodyText>The Hard Dead Time is enforced to be at least double the - ConnDeadTimeout. The provides an opportunity for at least one retry.</p> + ConnDeadTimeout.  The provides an opportunity for at least one retry.</p> </td> </tr> - <tr style='height:158.5pt'> + <tr style='mso-yfti-irow:29;height:158.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:158.5pt'> - <h5><a name="_Toc139993222"></a><a name="_Toc126872299"></a><a - name="_Toc115416230"></a><a name="_Value__:_TraceOption"></a>Value: - TraceOption</h5> + <h5><a name="_Value__:_TraceOption"></a><a name="_Toc115416230"></a><a + name="_Toc126872299"></a><a name="_Toc139993222"></a>Value: TraceOption</h5> <p class=MsoBodyText>Type: DWORD {0-15}<br> Default: 0</p> - <p class=MsoBodyText>Enables logging of debug output to the Windows Event Log.</p> + <p class=MsoBodyText>Enables logging of debug output to the Windows Event + Log.</p> <p class=MsoBodyText>Bit 0 enables logging of "Logon Events" - processed by the Network Provider and Winlogon Event Notification Handler. </p> + processed by the Network Provider and Winlogon Event Notification + Handler.  </p> <p class=MsoBodyText>Bit 1 enables logging of events captured by the AFS Client Service.</p> <p class=MsoBodyText>Bit 2 enables real-time viewing of "fs trace" @@ -3635,80 +4137,80 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> <p class=MsoBodyText>Bit 3 enables "fs trace" logging on startup.</p> </td> </tr> - <tr style='height:98.5pt'> + <tr style='mso-yfti-irow:30;height:98.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:98.5pt'> - <h5><a name="_Toc139993223"></a><a name="_Toc126872300"></a><a - name="_Toc115416231">Value: AllSubmount</a></h5> + <h5><a name="_Toc115416231"></a><a name="_Toc126872300"></a><a + name="_Toc139993223"></a><span style='mso-bookmark:_Toc115416231'>Value: + AllSubmount</span></h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: 1</p> <p class=MsoBodyText>Variable: allSubmount (smb.c)</p> <p class=MsoBodyText>By setting this value to 0, the - "\\NetbiosName\all" mount point will not be created. This allows - the read-write versions of root.afs to be hidden.</p> + "\\NetbiosName\all" mount point will not be created.  This + allows the read-write versions of root.afs to be hidden.</p> </td> </tr> - <tr style='height:78.5pt'> + <tr style='mso-yfti-irow:31;height:78.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:78.5pt'> - <h5><a name="_Toc139993224"></a><a name="_Toc126872301"></a><a - name="_Toc115416232"></a><a name="_Value___: NoFindLanaByName"></a>Value: - NoFindLanaByName</h5> + <h5><a name="_Value___:_NoFindLanaByName"></a><a name="_Toc115416232"></a><a + name="_Toc126872301"></a><a name="_Toc139993224"></a>Value: NoFindLanaByName</h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: 0</p> <p class=MsoBodyText>Disables the attempt to identity the network adapter to use by looking for an adapter with a display name of "AFS".</p> </td> </tr> - <tr style='height:78.5pt'> + <tr style='mso-yfti-irow:32;height:78.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:78.5pt'> - <h5><a name="_Toc139993225"></a><a name="_Toc126872302"></a><a - name="_Toc115416233">Value: MaxCPUs</a></h5> + <h5><a name="_Toc115416233"></a><a name="_Toc126872302"></a><a + name="_Toc139993225"></a><span style='mso-bookmark:_Toc115416233'>Value: + MaxCPUs</span></h5> <p class=MsoBodyText>Type: DWORD {1..32} or {1..64} depending on the architecture<br> Default: <no default></p> <p class=MsoBodyText>If this value is specified, afsd_service.exe will restrict itself to executing on the specified number of CPUs if there are a - greater number installed in the machine. </p> + greater number installed in the machine.  </p> </td> </tr> - <tr style='height:151.75pt'> + <tr style='mso-yfti-irow:33;height:151.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:151.75pt'> - <h5><a name="_Toc139993226"></a><a name="_Toc126872303"></a><a - name="_Toc115416234"></a><a name="_Value___: smbAuthType"></a>Value: - smbAuthType</h5> + <h5><a name="_Value___:_smbAuthType"></a><a name="_Toc115416234"></a><a + name="_Toc126872303"></a><a name="_Toc139993226"></a>Value: smbAuthType</h5> <p class=MsoBodyText>Type: DWORD {0..2}<br> Default: 2</p> <p class=MsoBodyText>If this value is specified, it defines the type of SMB authentication which must be present in order for the Windows SMB client to - connect to the AFS Client Service's SMB server. The values are:</p> + connect to the AFS Client Service's SMB server.  The values are:</p> <p class=MsoBodyText>0 = No authentication required<br> 1 = NTLM authentication required<br> 2 = Extended (GSS SPNEGO) authentication required<br> The default is Extended authentication</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:34;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993227"></a><a name="_Toc126872304"></a><a - name="_Toc115416235"></a><a name="_Value___: MaxLogSize"></a>Value: - MaxLogSize</h5> + <h5><a name="_Value___:_MaxLogSize"></a><a name="_Toc115416235"></a><a + name="_Toc126872304"></a><a name="_Toc139993227"></a>Value: MaxLogSize</h5> <p class=MsoBodyText>Type: DWORD {0 .. MAXDWORD}<br> Default: 100K</p> <p class=MsoBodyText>This entry determines the maximum size of the - %WINDIR%\TEMP\afsd_init.log file. If the file is larger than this value when - afsd_service.exe starts the file will be reset to 0 bytes. If this value is - 0, it means the file should be allowed to grow indefinitely.</p> + %WINDIR%\TEMP\afsd_init.log file.  If the file is larger than this value + when afsd_service.exe starts the file will be reset to 0 bytes.  If this + value is 0, it means the file should be allowed to grow indefinitely.</p> </td> </tr> - <tr style='height:65.75pt'> + <tr style='mso-yfti-irow:35;mso-yfti-lastrow:yes;height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993228"></a><a name="_Toc126872305"></a><a - name="_Toc115416236">Value: FlushOnHibernate</a></h5> + <h5><a name="_Toc115416236"></a><a name="_Toc126872305"></a><a + name="_Toc139993228"></a><span style='mso-bookmark:_Toc115416236'>Value: + FlushOnHibernate</span></h5> <p class=MsoBodyText>Type: DWORD {0,1}<br> Default: 1</p> <p class=MsoBodyText>If set, flushes all volumes before the machine goes on @@ -3717,77 +4219,82 @@ name="_Toc126872269"></a><a name="_Toc115416200">Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993229"></a><a -name="_Toc126872306"></a><a name="_Toc115416237">Regkey:<br> -[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters\GlobalAutoMapper]</a></h3> +<h3><a name="_Toc115416237"></a><a name="_Toc139993229"></a><a +name="_Toc126872306"></a><span style='mso-bookmark:_Toc115416237'>Regkey:<br> +[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters\GlobalAutoMapper]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:65.0pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:65.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.0pt'> - <h5><a name="_Toc139993230"></a><a name="_Toc126872307"></a><a - name="_Toc115416238">Value: <Drive Letter:> for example "G:"</a></h5> + <h5><a name="_Toc115416238"></a><a name="_Toc126872307"></a><a + name="_Toc139993230"></a><span style='mso-bookmark:_Toc115416238'>Value: + <Drive Letter:> for example "G:"</span></h5> <p class=MsoBodyText>Type: REG_SZ</p> - <p class=MsoBodyText>Specifies the submount name to be mapped by - afsd_service.exe at startup to the provided drive letter.</p> + <p class=MsoBodyText>Specifies the submount name to be mapped by afsd_service.exe + at startup to the provided drive letter.</p> </td> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993231"></a><a -name="_Toc126872308"></a><a name="_Toc115416239">Regkey:<br> -[HKLM\SOFTWARE\OpenAFS\Client]</a></h3> +<h3><a name="_Toc115416239"></a><a name="_Toc139993231"></a><a +name="_Toc126872308"></a><span style='mso-bookmark:_Toc115416239'>Regkey:<br> +[HKLM\SOFTWARE\OpenAFS\Client]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:78.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:78.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:78.5pt'> - <h5><a name="_Toc139993232"></a><a name="_Toc126872309"></a><a - name="_Toc115416240"></a><a name="_Value___: CellServDBDir"></a>Value: - CellServDBDir</h5> + <h5><a name="_Value___:_CellServDBDir"></a><a name="_Toc115416240"></a><a + name="_Toc126872309"></a><a name="_Toc139993232"></a>Value: CellServDBDir</h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <not defined></p> - <p class=MsoBodyText>Specifies the directory containing the CellServDB file. - When this value is not specified, the AFS Client install directory is used.</p> + <p class=MsoBodyText>Specifies the directory containing the CellServDB + file.  When this value is not specified, the AFS Client install + directory is used.</p> </td> </tr> - <tr style='height:145.25pt'> + <tr style='mso-yfti-irow:1;height:145.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:145.25pt'> - <h5><a name="_Toc139993233"></a><a name="_Toc126872310"></a><a - name="_Toc115416241"></a><a name="_Value___: VerifyServiceSignature"></a>Value: + <h5><a name="_Value___:_VerifyServiceSignature"></a><a name="_Toc115416241"></a><a + name="_Toc126872310"></a><a name="_Toc139993233"></a>Value: VerifyServiceSignature</h5> <p class=MsoBodyText>Type: REG_DWORD<br> Default: 0x1</p> - <p class=MsoBodyText>This value can be used to disable the runtime - verification of the digital signatures applied to afsd_service.exe and the - OpenAFS DLLs it loads. This test is performed to verify that the DLLs - which are loaded by afsd_service.exe are from the same distribution as - afsd_service.exe. This is to prevent random errors caused when DLLs from one - distribution of AFS are loaded by another one. This is not a security test. - The reason for disabling this test is to free up additional memory which can - be used for a large cache size.</p> + <p class=MsoBodyText>This value can be used to disable the runtime verification + of the digital signatures applied to afsd_service.exe and the OpenAFS DLLs it + loads.  This test is performed to verify that   the DLLs which + are loaded by afsd_service.exe are from the same distribution as + afsd_service.exe.  This is to prevent random errors caused when DLLs + from one distribution of AFS are loaded by another one.  This is not a + security test.  The reason for disabling this test is to free up + additional memory which can be used for a large cache size.</p> </td> </tr> - <tr style='height:105.5pt'> + <tr style='mso-yfti-irow:2;height:105.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:105.5pt'> - <h5><a name="_Toc139993234"></a><a name="_Toc126872311"></a><a - name="_Toc115416242"></a><a name="_Value___: IoctlDebug"></a>Value: - IoctlDebug</h5> + <h5><a name="_Value___:_IoctlDebug"></a><a name="_Toc115416242"></a><a + name="_Toc126872311"></a><a name="_Toc139993234"></a>Value: IoctlDebug</h5> <p class=MsoBodyText>Type: REG_DWORD<br> Default: 0x0</p> <p class=MsoBodyText>This value can be used to debug the cause of pioctl() - failures. Set a non-zero value and the pioctl() library will output status - information to stdout. Executing command line tools such as tokens.exe, - fs.exe, etc can then be used to determine why the pioctl() call is failing. </p> + failures.  Set a non-zero value and the pioctl() library will output + status information to stdout.  Executing command line tools such as + tokens.exe, fs.exe, etc can then be used to determine why the pioctl() call + is failing. </p> </td> </tr> - <tr style='height:330.75pt'> + <tr style='mso-yfti-irow:3;height:330.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:330.75pt'> - <h5><a name="_Toc139993235"></a><a name="_Toc126872312"></a><a - name="_Toc115416243">Value: MiniDumpType</a></h5> + <h5><a name="_Toc115416243"></a><a name="_Toc126872312"></a><a + name="_Toc139993235"></a><span style='mso-bookmark:_Toc115416243'>Value: + MiniDumpType</span></h5> <p class=MsoBodyText>Type: REG_DWORD<br> Default: 0x0 (MiniDumpNormal)</p> <p class=MsoBodyText>This value is used to specify the type of minidump @@ -3795,8 +4302,8 @@ name="_Toc126872308"></a><a name="_Toc115416239">Regkey:<br> initiated is dump file is generated with the "fs.exe minidump" command.</p> <p class=MsoBodyText>Valid values are dependent on the version of DbgHelp.dll - installed on the machine. See the Microsoft Developer Library for further - information.</p> + installed on the machine.  See the Microsoft Developer Library for + further information.</p> <p class=MsoBodyText>MiniDumpNormal = 0x00000000,<br> MiniDumpWithDataSegs = 0x00000001,<br> MiniDumpWithFullMemory = 0x00000002,<br> @@ -3814,58 +4321,63 @@ name="_Toc126872308"></a><a name="_Toc115416239">Regkey:<br> MiniDumpWithCodeSegs = 0x00002000</p> </td> </tr> - <tr style='height:138.25pt'> + <tr style='mso-yfti-irow:4;mso-yfti-lastrow:yes;height:138.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:138.25pt'> - <h5><a name="_Toc139993236"></a><a name="_Toc126872313"></a><a - name="_Toc115416244"></a><a name="_Value___: StoreAnsiFilenames"></a>Value: + <h5><a name="_Value___:_StoreAnsiFilenames"></a><a name="_Toc115416244"></a><a + name="_Toc126872313"></a><a name="_Toc139993236"></a>Value: StoreAnsiFilenames</h5> <p class=MsoBodyText>Type: REG_DWORD<br> Default: 0x0</p> <p class=MsoBodyText>This value can be used to force the AFS Client Service to store filenames using the Windows system's ANSI character set instead of the OEM Code Page character set which has traditionally been used by SMB file - systems. </p> + systems.  </p> <p class=MsoBodyText>Note: The use of ANSI characters will render access to - files with 8-bit OEM file names unaccessible from Windows. This option is of - use primarily when you wish to allow file names produced on Windows to be - accessible from Latin-1 UNIX systems and vice versa.</p> + files with 8-bit OEM file names unaccessible from Windows.  This option + is of use primarily when you wish to allow file names produced on Windows to + be accessible from Latin-1 UNIX systems and vice versa.</p> </td> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993237"></a><a -name="_Toc126872314"></a><a name="_Toc115416245">Regkey:<br> -[HKLM\SOFTWARE\OpenAFS\Client\CSCPolicy]</a></h3> +<h3><a name="_Toc115416245"></a><a name="_Toc139993237"></a><a +name="_Toc126872314"></a><span style='mso-bookmark:_Toc115416245'>Regkey:<br> +[HKLM\SOFTWARE\OpenAFS\Client\CSCPolicy]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:112.0pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:112.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:112.0pt'> - <h5><a name="_Toc139993238"></a><a name="_Toc126872315"></a><a - name="_Toc115416246">Value: "smb/cifs share name"</a></h5> + <h5><a name="_Toc115416246"></a><a name="_Toc126872315"></a><a + name="_Toc139993238"></a><span style='mso-bookmark:_Toc115416246'>Value: + "smb/cifs share name"</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none></p> - <p class=MsoBodyText>This key is used to map SMB/CIFS shares to Client Side - Caching (off-line access) policies. For each share one of the following - policies may be used: "manual", "programs", - "documents", "disable". </p> + <p class=MsoBodyText>This key is used to map SMB/CIFS shares to Client Side Caching + (off-line access) policies. For each share one of the following policies may + be used: "manual", "programs", "documents", + "disable".  </p> <p class=MsoBodyText>These values used to be stored in afsdsbmt.ini</p> </td> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993239"></a><a -name="_Toc126872316"></a><a name="_Toc115416247"></a><a -name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie"></a>Regkey:<br> +<h3><a name="_Toc139993239"></a><a name="_Toc126872316"></a><a +name="_Toc115416247"></a><a name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie"></a>Regkey:<br> [HKLM\SOFTWARE\OpenAFS\Client\Freelance]</h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:138.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:138.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:138.5pt'> - <h5><a name="_Toc139993240"></a><a name="_Toc126872317"></a><a - name="_Toc115416248">Value: "numeric value"</a></h5> + <h5><a name="_Toc115416248"></a><a name="_Toc126872317"></a><a + name="_Toc139993240"></a><span style='mso-bookmark:_Toc115416248'>Value: + "numeric value"</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none></p> <p class=MsoBodyText>This key is used to store dot terminated mount point @@ -3878,22 +4390,24 @@ name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie"></a>Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993241"></a><a -name="_Toc126872318"></a><a name="_Toc115416249"></a><a -name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie_1"></a>Regkey:<br> +<h3><a name="_Toc139993241"></a><a name="_Toc126872318"></a><a +name="_Toc115416249"></a><a name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie_1"></a>Regkey:<br> [HKLM\SOFTWARE\OpenAFS\Client\Freelance\Symlinks]</h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:145.0pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:145.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:145.0pt'> - <h5><a name="_Toc139993242"></a><a name="_Toc126872319"></a><a - name="_Toc115416250">Value: "numeric value"</a></h5> + <h5><a name="_Toc115416250"></a><a name="_Toc126872319"></a><a + name="_Toc139993242"></a><span style='mso-bookmark:_Toc115416250'>Value: + "numeric value"</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none></p> - <p class=MsoBodyText>This key is used to store a dot terminated symlink - strings for use in constructing the fake root.afs volume when Freelance - (dynamic roots) mode is activated.</p> + <p class=MsoBodyText>This key is used to store a dot terminated symlink strings + for use in constructing the fake root.afs volume when Freelance (dynamic + roots) mode is activated.</p> <p class=MsoBodyText>"linkname:destination-path."</p> <p class=MsoBodyText>"athena:athena.mit.edu."</p> <p class=MsoBodyText>"home:athena.mit.edu\user\j\a\jaltman."</p> @@ -3902,23 +4416,26 @@ name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie_1"></a>Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993243"></a><a -name="_Toc126872320"></a><a name="_Toc115416251">Regkey:<br> -[HKLM\SOFTWARE\OpenAFS\Client\Submounts]</a></h3> +<h3><a name="_Toc115416251"></a><a name="_Toc139993243"></a><a +name="_Toc126872320"></a><span style='mso-bookmark:_Toc115416251'>Regkey:<br> +[HKLM\SOFTWARE\OpenAFS\Client\Submounts]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:171.75pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:171.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:171.75pt'> - <h5><a name="_Toc139993244"></a><a name="_Toc126872321"></a><a - name="_Toc115416252">Value: "submount name"</a></h5> + <h5><a name="_Toc115416252"></a><a name="_Toc126872321"></a><a + name="_Toc139993244"></a><span style='mso-bookmark:_Toc115416252'>Value: + "submount name"</span></h5> <p class=MsoBodyText>Type: REG_EXPAND_SZ<br> Default: <none></p> <p class=MsoBodyText>This key is used to store mappings of UNIX style AFS - paths to submount names which can be referenced as UNC paths. For example - the submount string “/athena.mit.edu/user/j/a/jaltman" can be associated - with the submount name "jaltman.home". This can then be referenced - as the UNC path \\AFS\jaltman.home.</p> + paths to submount names which can be referenced as UNC paths.  For + example the submount string “/athena.mit.edu/user/j/a/jaltman" can be + associated with the submount name "jaltman.home".  This can + then be referenced as the UNC path \\AFS\jaltman.home.</p> <p class=MsoBodyText>These values used to be stored in afsdsbmt.ini</p> <p class=MsoBodyText>NOTE: Submounts should no longer be used with OpenAFS. Use the Windows Explorer to create drive mappings to AFS UNC paths instead of @@ -3927,64 +4444,73 @@ name="_Toc126872320"></a><a name="_Toc115416251">Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993245"></a><a -name="_Toc126872322"></a><a name="_Toc115416253"></a><a -name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie_2"></a>Regkey:<br> +<h3><a name="_Toc139993245"></a><a name="_Toc126872322"></a><a +name="_Toc115416253"></a><a name="_Regkey:_[HKLM\SOFTWARE\OpenAFS\Clie_2"></a>Regkey:<br> [HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\VLDB]</h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:105.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:105.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:105.5pt'> - <h5><a name="_Toc139993246"></a><a name="_Toc126872323"></a><a - name="_Toc115416254">Value: "hostname or ip address"</a></h5> + <h5><a name="_Toc115416254"></a><a name="_Toc126872323"></a><a + name="_Toc139993246"></a><span style='mso-bookmark:_Toc115416254'>Value: + "hostname or ip address"</span></h5> <p class=MsoBodyText>Type: REG_DWORD<br> Default: <none></p> <p class=MsoBodyText>This key is used to specify a default set of VLDB server preferences. For each entry the value name will be either the IP address of a - server or a fully qualified domain name. The value will be the ranking. The - ranking will be adjusted by a random value between 0 and 256 prior to the - preference being set.</p> + server or a fully qualified domain name.  The value will be the + ranking.  The ranking will be adjusted by a random value between 0 and + 256 prior to the preference being set.</p> </td> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993247"></a><a -name="_Toc126872324"></a><a name="_Toc115416255">Regkey:<br> -[HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\File]</a></h3> +<h3><a name="_Toc115416255"></a><a name="_Toc139993247"></a><a +name="_Toc126872324"></a><span style='mso-bookmark:_Toc115416255'>Regkey:<br> +[HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\File]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:105.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:105.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:105.5pt'> - <h5><a name="_Toc139993248"></a><a name="_Toc126872325"></a><a - name="_Toc115416256">Value: "hostname or ip address"</a></h5> + <h5><a name="_Toc115416256"></a><a name="_Toc126872325"></a><a + name="_Toc139993248"></a><span style='mso-bookmark:_Toc115416256'>Value: + "hostname or ip address"</span></h5> <p class=MsoBodyText>Type: REG_DWORD<br> Default: <none></p> <p class=MsoBodyText>This key is used to specify a default set of File server preferences. For each entry the value name will be either the IP address of a - server or a fully qualified domain name. The value will be the ranking. The - ranking will be adjusted by a random value between 0 and 256 prior to the - preference being set.</p> + server or a fully qualified domain name.  The value will be the + ranking.  The ranking will be adjusted by a random value between 0 and + 256 prior to the preference being set.</p> </td> </tr> </table> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993249"></a><a -name="_Toc126872326"></a><a name="_Toc115417105"></a><a name="_Toc115416257">A.2. -Integrated Logon Network provider parameters</a></h2> +<h2><a name="_Toc115416257"></a><a name="_Toc139993249"></a><a +name="_Toc126872326"></a><a name="_Toc115417105"></a><span style='mso-bookmark: +_Toc115416257'>A.2. Integrated Logon Network provider parameters</span></h2> <p class=MsoBodyText>Affects the network provider (afslogon.dll).</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993250"></a><a -name="_Toc126872327"></a><a name="_Toc115416258">Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</a></h3> +<h3><a name="_Toc115416258"></a><a name="_Toc139993250"></a><a +name="_Toc126872327"></a><span style='mso-bookmark:_Toc115416258'>Regkey: +[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:65.75pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993251"></a><a name="_Toc126872328"></a><a - name="_Toc115416259">Value: FailLoginsSilently</a></h5> + <h5><a name="_Toc115416259"></a><a name="_Toc126872328"></a><a + name="_Toc139993251"></a><span style='mso-bookmark:_Toc115416259'>Value: + FailLoginsSilently</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 0</p> <p class=MsoBodyText>Do not display message boxes if the login fails.</p> @@ -3992,81 +4518,89 @@ name="_Toc126872327"></a><a name="_Toc115416258">Regkey: [HKLM\SYSTEM\CurrentCon </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993252"></a><a -name="_Toc126872329"></a><a name="_Toc115416260">Regkey:<br> -[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]</a></h3> +<h3><a name="_Toc115416260"></a><a name="_Toc139993252"></a><a +name="_Toc126872329"></a><span style='mso-bookmark:_Toc115416260'>Regkey:<br> +[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:65.75pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993253"></a><a name="_Toc126872330"></a><a - name="_Toc115416261">Value: NoWarnings</a></h5> + <h5><a name="_Toc115416261"></a><a name="_Toc126872330"></a><a + name="_Toc139993253"></a><span style='mso-bookmark:_Toc115416261'>Value: + NoWarnings</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 0</p> <p class=MsoBodyText>Disables visible warnings during logon.</p> </td> </tr> - <tr style='height:65.75pt'> + <tr style='mso-yfti-irow:1;height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993254"></a><a name="_Toc126872331"></a><a - name="_Toc115416262">Value: AuthentProviderPath</a></h5> + <h5><a name="_Toc115416262"></a><a name="_Toc126872331"></a><a + name="_Toc139993254"></a><span style='mso-bookmark:_Toc115416262'>Value: + AuthentProviderPath</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> NSIS: %WINDIR%\SYSTEM32\afslogon.dll</p> <p class=MsoBodyText>Specifies the install location of the authentication provider dll.</p> </td> </tr> - <tr style='height:65.75pt'> + <tr style='mso-yfti-irow:2;height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993255"></a><a name="_Toc126872332"></a><a - name="_Toc115416263">Value: Class</a></h5> + <h5><a name="_Toc115416263"></a><a name="_Toc126872332"></a><a + name="_Toc139993255"></a><span style='mso-bookmark:_Toc115416263'>Value: + Class</span></h5> <p class=MsoBodyText>Type: DWORD<br> NSIS: 0x02</p> <p class=MsoBodyText>Specifies the class of network provider</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:3;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993256"></a><a name="_Toc126872333"></a><a - name="_Toc115416264">Value: DependOnGroup</a></h5> + <h5><a name="_Toc115416264"></a><a name="_Toc126872333"></a><a + name="_Toc139993256"></a><span style='mso-bookmark:_Toc115416264'>Value: + DependOnGroup</span></h5> <p class=MsoBodyText>Type: REG_MULTI_SZ<br> NSIS: PNP_TDI</p> <p class=MsoBodyText>Specifies the service groups upon which the AFS Client - Service depends. Windows should not attempt to start the AFS Client Service - until all of the services within these groups have successfully started.</p> + Service depends.  Windows should not attempt to start the AFS Client + Service until all of the services within these groups have successfully + started.</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:4;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993257"></a><a name="_Toc126872334"></a><a - name="_Toc115416265">Value: DependOnService</a></h5> + <h5><a name="_Toc115416265"></a><a name="_Toc126872334"></a><a + name="_Toc139993257"></a><span style='mso-bookmark:_Toc115416265'>Value: + DependOnService</span></h5> <p class=MsoBodyText>Type: REG_MULTI_SZ<br> NSIS: Tcpip NETBIOS RpcSs</p> <p class=MsoBodyText>Specifies a list of services upon which the AFS Client - Service depends. Windows should not attempt to start the AFS Client Service - until all of the specified services have successfully started.</p> + Service depends.  Windows should not attempt to start the AFS Client + Service until all of the specified services have successfully started.</p> </td> </tr> - <tr style='height:65.75pt'> + <tr style='mso-yfti-irow:5;height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993258"></a><a name="_Toc126872335"></a><a - name="_Toc115416266">Value: Name</a></h5> + <h5><a name="_Toc115416266"></a><a name="_Toc126872335"></a><a + name="_Toc139993258"></a><span style='mso-bookmark:_Toc115416266'>Value: Name</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> NSIS: "OpenAFSDaemon"</p> <p class=MsoBodyText>Specifies the display name of the AFS Client Service</p> </td> </tr> - <tr style='height:65.75pt'> + <tr style='mso-yfti-irow:6;mso-yfti-lastrow:yes;height:65.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:65.75pt'> - <h5><a name="_Toc139993259"></a><a name="_Toc126872336"></a><a - name="_Toc115416267">Value: ProviderPath</a></h5> + <h5><a name="_Toc115416267"></a><a name="_Toc126872336"></a><a + name="_Toc139993259"></a><span style='mso-bookmark:_Toc115416267'>Value: + ProviderPath</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> NSIS: %WINDIR%\SYSTEM32\afslogon.dll</p> <p class=MsoBodyText>Specifies the DLL to use for the network provider</p> @@ -4074,79 +4608,79 @@ name="_Toc126872329"></a><a name="_Toc115416260">Regkey:<br> </tr> </table> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993260"></a><a -name="_Toc126872337"></a><a name="_Toc115417106"></a><a name="_Toc115416268"></a><a -name="_A.2.1_Domain_specific_configuration"></a>A.2.1 Domain specific -configuration keys for the Network Provider</h2> +<h2><a name="_Toc139993260"></a><a name="_Toc126872337"></a><a +name="_Toc115417106"></a><a name="_Toc115416268"></a><a +name="_A.2.1_Domain_specific_configuration"></a>A.2.1 Domain specific configuration +keys for the Network Provider</h2> <p class=MsoBodyText>The network provider can be configured to have different -behavior depending on the domain that the user logs into. These settings are only -relevant when using integrated login. A domain refers to an Active Directory -(AD) domain, a trusted Kerberos (non-AD) realm or the local machine (i.e. local -account logins). The domain name that is used for selecting the domain would -be the domain that is passed into the NPLogonNotify function of the network -provider.</p> +behavior depending on the domain that the user logs into.  These settings +are only relevant when using integrated login.  A domain refers to an +Active Directory (AD) domain, a trusted Kerberos (non-AD) realm or the local +machine (i.e. local account logins).  The domain name that is used for +selecting the domain would be the domain that is passed into the NPLogonNotify +function of the network provider.</p> <p class=MsoBodyText>Domain specific registry keys are:</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993261"></a><a -name="_Toc126872338"></a><a name="_Toc115416269">[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]</a></h3> +<h3><a name="_Toc115416269"></a><a name="_Toc139993261"></a><a +name="_Toc126872338"></a><span style='mso-bookmark:_Toc115416269'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]</span></h3> -<p class=MsoBodyText> (NP key)</p> +<p class=MsoBodyText>  (NP key)</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993262"></a><a -name="_Toc126872339"></a><a name="_Toc115416270">[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain]</a></h3> +<h3><a name="_Toc115416270"></a><a name="_Toc139993262"></a><a +name="_Toc126872339"></a><span style='mso-bookmark:_Toc115416270'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain]</span></h3> -<p class=MsoBodyText> (Domains key)</p> +<p class=MsoBodyText>  (Domains key)</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993263"></a><a -name="_Toc126872340"></a><a name="_Toc115416271">[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\"domain -name"]</a></h3> +<h3><a name="_Toc115416271"></a><a name="_Toc139993263"></a><a +name="_Toc126872340"></a><span style='mso-bookmark:_Toc115416271'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\"domain +name"]</span></h3> -<p class=MsoBodyText> (Specific domain key. One per domain.)</p> +<p class=MsoBodyText>  (Specific domain key. One per domain.)</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993264"></a><a -name="_Toc126872341"></a><a name="_Toc115416272">[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]</a></h3> +<h3><a name="_Toc115416272"></a><a name="_Toc139993264"></a><a +name="_Toc126872341"></a><span style='mso-bookmark:_Toc115416272'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]</span></h3> -<p class=MsoBodyText> (Localhost key)</p> +<p class=MsoBodyText>  (Localhost key)</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993265"></a><a -name="_Toc126872342"></a><a name="_Toc115416273">Example:</a></h3> +<h3><a name="_Toc115416273"></a><a name="_Toc139993265"></a><a +name="_Toc126872342"></a><span style='mso-bookmark:_Toc115416273'>Example:</span></h3> -<p class=PreformattedText> HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider</p> +<p class=preformattedtext> HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider</p> -<p class=PreformattedText> |</p> +<p class=preformattedtext>  |</p> -<p class=PreformattedText> +- Domain</p> +<p class=preformattedtext>  +- Domain</p> -<p class=PreformattedText> +-AD1.EXAMPLE.COM</p> +<p class=preformattedtext>     +-AD1.EXAMPLE.COM</p> -<p class=PreformattedText> +-AD2.EXAMPLE.NET</p> +<p class=preformattedtext>     +-AD2.EXAMPLE.NET</p> -<p class=PreformattedText> +-LOCALHOST</p> +<p class=preformattedtext>     +-LOCALHOST</p> <p class=MsoBodyText>Each of the domain specific keys can have the set of -values described in 2.1.1. The effective values are chosen as described in -2.1.2.</p> +values described in 2.1.1.  The effective values are chosen as described +in 2.1.2.</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993266"></a><a -name="_Toc126872343"></a><a name="_Toc115416274">A.2.1.1 Domain specific -configuration values</a></h3> +<h3><a name="_Toc115416274"></a><a name="_Toc139993266"></a><a +name="_Toc126872343"></a><span style='mso-bookmark:_Toc115416274'>A.2.1.1 +Domain specific configuration values</span></h3> -<h4><a name="_Toc139993267"></a><a name="_Toc126872344"></a><a -name="_Toc115416275">[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]<br> +<h4><a name="_Toc115416275"></a><a name="_Toc139993267"></a><a +name="_Toc126872344"></a><span style='mso-bookmark:_Toc115416275'>[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]<br> [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain]<br> [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\"domain name"]<br> -[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]</a></h4> +[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]</span></h4> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:191.0pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:191.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:191.0pt'> - <h5><a name="_Toc139993268"></a><a name="_Toc126872345"></a><a - name="_Toc115416276"></a><a name="_Value___: LogonOptions"></a>Value: - LogonOptions</h5> + <h5><a name="_Value___:_LogonOptions"></a><a name="_Toc115416276"></a><a + name="_Toc126872345"></a><a name="_Toc139993268"></a>Value: LogonOptions</h5> <p class=MsoBodyText>Type: DWORD<br> Default: 0x01</p> <p class=MsoBodyText>NSIS/WiX: depends on user configuration</p> @@ -4155,18 +4689,19 @@ name"]<br> 0x02 - High Security Mode is used (deprecated)<br> 0x03 - Integrated Logon with High Security Mode is used (deprecated)</p> <p class=MsoBodyText>High Security Mode generates random SMB names for the - creation of Drive Mappings. This mode should not be used without Integrated - Logon.</p> + creation of Drive Mappings.  This mode should not be used without + Integrated Logon.</p> <p class=MsoBodyText>As of 1.3.65 the SMB server supports SMB - authentication. The High Security Mode should not be used when using SMB - authentication (SMBAuthType setting is non zero).</p> + authentication.  The High Security Mode should not be used when using + SMB authentication (SMBAuthType setting is non zero).</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:1;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993269"></a><a name="_Toc126872346"></a><a - name="_Toc115416277">Value: FailLoginsSilentl</a></h5> + <h5><a name="_Toc115416277"></a><a name="_Toc126872346"></a><a + name="_Toc139993269"></a><span style='mso-bookmark:_Toc115416277'>Value: + FailLoginsSilentl</span></h5> <p class=MsoBodyText>Type: DWORD (1|0)<br> Default: 0<br> NSIS/WiX: (not set)</p> @@ -4174,28 +4709,30 @@ name"]<br> event of an error during the integrated login process.</p> </td> </tr> - <tr style='height:139.0pt'> + <tr style='mso-yfti-irow:2;height:139.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:139.0pt'> - <h5><a name="_Toc139993270"></a><a name="_Toc126872347"></a><a - name="_Toc115416278">Value: LogonScript</a></h5> + <h5><a name="_Toc115416278"></a><a name="_Toc126872347"></a><a + name="_Toc139993270"></a><span style='mso-bookmark:_Toc115416278'>Value: + LogonScript</span></h5> <p class=MsoBodyText>Type: REG_SZ or REG_EXPAND_SZ<br> Default: (null)<br> NSIS/WiX: (only value under NP key) <install path>\afscreds.exe -:%s -x -a -m -n -q</p> <p class=MsoBodyText>A logon script that will be scheduled to be run after - the profile load is complete. If using the REG_EXPAND_SZ type, you can use - any system environment variable as "%varname%" which would be - expanded at the time the network provider is run. Optionally using a + the profile load is complete.  If using the REG_EXPAND_SZ type, you can + use any system environment variable as "%varname%" which would be + expanded at the time the network provider is run.  Optionally using a "%s" in the value would result in it being expanded into the AFS SMB username for the session.</p> </td> </tr> - <tr style='height:105.5pt'> + <tr style='mso-yfti-irow:3;height:105.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:105.5pt'> - <h5><a name="_Toc139993271"></a><a name="_Toc126872348"></a><a - name="_Toc115416279">Value: LoginRetryInterval</a></h5> + <h5><a name="_Toc115416279"></a><a name="_Toc126872348"></a><a + name="_Toc139993271"></a><span style='mso-bookmark:_Toc115416279'>Value: + LoginRetryInterval</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 30<br> NSIS/WiX: (not set)</p> @@ -4205,22 +4742,23 @@ name"]<br> if the service is up.</p> </td> </tr> - <tr style='height:79.25pt'> + <tr style='mso-yfti-irow:4;height:79.25pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:79.25pt'> - <h5><a name="_Toc139993272"></a><a name="_Toc126872349"></a><a - name="_Toc115416280">Value: LoginSleepInterval</a></h5> + <h5><a name="_Toc115416280"></a><a name="_Toc126872349"></a><a + name="_Toc139993272"></a><span style='mso-bookmark:_Toc115416280'>Value: + LoginSleepInterval</span></h5> <p class=MsoBodyText>Type: DWORD<br> Default: 5<br> NSIS/WiX: (not set)</p> <p class=MsoBodyText>See description of LoginRetryInterval.</p> </td> </tr> - <tr style='height:78.5pt'> + <tr style='mso-yfti-irow:5;mso-yfti-lastrow:yes;height:78.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:78.5pt'> - <h5><a name="_Toc139993273"></a><a name="_Toc126872350"></a><a - name="_Toc115416281"></a><a name="_Value:_TheseCells"></a>Value: TheseCells</h5> + <h5><a name="_Value:_TheseCells"></a><a name="_Toc115416281"></a><a + name="_Toc126872350"></a><a name="_Toc139993273"></a>Value: TheseCells</h5> <p class=MsoBodyText>Type: REG_MULTI_SZ<br> NSIS: <not set></p> <p class=MsoBodyText>When Kerberos 5 is being used, TheseCells provides a @@ -4230,80 +4768,86 @@ name"]<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993274"></a><a -name="_Toc126872351"></a><a name="_Toc115416282">A.2.1.2 Selection of effective -values for domain specific configuration</a></h3> +<h3><a name="_Toc115416282"></a><a name="_Toc139993274"></a><a +name="_Toc126872351"></a><span style='mso-bookmark:_Toc115416282'>A.2.1.2 +Selection of effective values for domain specific configuration</span></h3> <p class=MsoBodyText>During login to domain X, where X is the domain passed -into NPLogonNotify as lpAuthentInfo->LogonDomainName or the string 'LOCALHOST' -if lpAuthentInfo->LogonDomainName equals the name of the computer, the -following keys will be looked up.</p> +into NPLogonNotify as lpAuthentInfo->LogonDomainName or the string +'LOCALHOST' if lpAuthentInfo->LogonDomainName equals the name of the +computer, the following keys will be looked up.</p> <p class=MsoBodyText style='margin-left:36.0pt;text-indent:-18.0pt'>1.<span -style='font:7.0pt "Times New Roman"'>      </span>NP -key. ("HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider")</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>NP key. +("HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider")</p> <p class=MsoBodyText style='margin-left:36.0pt;text-indent:-18.0pt'>2.<span -style='font:7.0pt "Times New Roman"'>      </span>Domains -key. (NP key\"Domain")</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Domains key. (NP key\"Domain")</p> <p class=MsoBodyText style='margin-left:36.0pt;text-indent:-18.0pt'>3.<span -style='font:7.0pt "Times New Roman"'>      </span>Specific -domain key. (Domains key\X)</p> +style='font-size:7.0pt;font-family:"Times New Roman"'>      +</span>Specific domain key. (Domains key\X)</p> <p class=MsoBodyText>If the specific domain key does not exist, then the -domains key will be ignored. All the configuration information in this case -will come from the NP key.</p> +domains key will be ignored.  All the configuration information in this +case will come from the NP key.</p> <p class=MsoBodyText>If the specific domain key exists, then for each of the -values metioned in (2), they will be looked up in the specific domain key, domains -key and the NP key successively until the value is found. The first instance of -the value found this way will be the effective for the login session. If no -such instance can be found, the default will be used. To re-iterate, a value -in a more specific key supercedes a value in a less specific key. The -exceptions to this rule are stated below.</p> +values metioned in (2), they will be looked up in the specific domain key, +domains key and the NP key successively until the value is found. The first +instance of the value found this way will be the effective for the login +session.  If no such instance can be found, the default will be used.  +To re-iterate, a value in a more specific key supercedes a value in a less +specific key.  The exceptions to this rule are stated below.</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993275"></a><a -name="_Toc126872352"></a><a name="_Toc115416283">A.2.1.3 Exceptions to A.2.1.2</a></h3> +<h3><a name="_Toc115416283"></a><a name="_Toc139993275"></a><a +name="_Toc126872352"></a><span style='mso-bookmark:_Toc115416283'>A.2.1.3 +Exceptions to A.2.1.2</span></h3> <p class=MsoBodyText>To retain backwards compatibility, the following exceptions are made to 2.1.2.</p> -<h4><a name="_Toc139993276"></a><a name="_Toc126872353"></a><a -name="_Toc115416284">2.1.3.1 'FailLoginsSilently'</a></h4> +<h4><a name="_Toc115416284"></a><a name="_Toc139993276"></a><a +name="_Toc126872353"></a><span style='mso-bookmark:_Toc115416284'>2.1.3.1 +'FailLoginsSilently'</span></h4> -<p class=MsoBodyText>Historically, the 'FailLoginsSilently' value was in HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters -key and not in the NP key. Therefore, for backwards compatibility, the value -in the Parameters key will supercede all instances of this value in other -keys. In the absence of this value in the Parameters key, normal scope rules -apply.</p> +<p class=MsoBodyText>Historically, the 'FailLoginsSilently' value was in +HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters key and not +in the NP key.  Therefore, for backwards compatibility, the value in the +Parameters key will supercede all instances of this value in other keys.  +In the absence of this value in the Parameters key, normal scope rules apply.</p> -<h4><a name="_Toc139993277"></a><a name="_Toc126872354"></a><a -name="_Toc115416285">2.1.3.2 'LogonScript'</a></h4> +<h4><a name="_Toc115416285"></a><a name="_Toc139993277"></a><a +name="_Toc126872354"></a><span style='mso-bookmark:_Toc115416285'>2.1.3.2 +'LogonScript'</span></h4> <p class=MsoBodyText>If a 'LogonScript' is not specified in the specific domain key nor in the domains key, the value in the NP key will only be checked if the -effective 'LogonOptions' specify a high security integrated login. If a logon -script is specified in the specific domain key or the domains key, it will be -used regardless of the high security setting. Please be aware of this when -setting this value.</p> +effective 'LogonOptions' specify a high security integrated login.  If a +logon script is specified in the specific domain key or the domains key, it +will be used regardless of the high security setting.  Please be aware of +this when setting this value.</p> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993278"></a><a -name="_Toc126872355"></a><a name="_Toc115417107"></a><a name="_Toc115416286">A.3. -AFS Credentials System Tray Tool parameters</a></h2> +<h2><a name="_Toc115416286"></a><a name="_Toc139993278"></a><a +name="_Toc126872355"></a><a name="_Toc115417107"></a><span style='mso-bookmark: +_Toc115416286'>A.3. AFS Credentials System Tray Tool parameters</span></h2> <p class=MsoBodyText>Affects the behavior of afscreds.exe</p> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993279"></a><a -name="_Toc126872356"></a><a name="_Toc115416287">Regkey:<br> -[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</a></h3> +<h3><a name="_Toc115416287"></a><a name="_Toc139993279"></a><a +name="_Toc126872356"></a><span style='mso-bookmark:_Toc115416287'>Regkey:<br> +[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:92.0pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993280"></a><a name="_Toc126872357"></a><a - name="_Toc115416288">Value: Gateway</a></h5> + <h5><a name="_Toc115416288"></a><a name="_Toc126872357"></a><a + name="_Toc139993280"></a><span style='mso-bookmark:_Toc115416288'>Value: + Gateway</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: ""<br> Function: GetGatewayName()</p> @@ -4311,11 +4855,11 @@ name="_Toc126872356"></a><a name="_Toc115416287">Regkey:<br> access, the name of the gateway is specified by this value.</p> </td> </tr> - <tr style='height:92.0pt'> + <tr style='mso-yfti-irow:1;mso-yfti-lastrow:yes;height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993281"></a><a name="_Toc126872358"></a><a - name="_Toc115416289">Value: Cell</a></h5> + <h5><a name="_Toc115416289"></a><a name="_Toc126872358"></a><a + name="_Toc139993281"></a><span style='mso-bookmark:_Toc115416289'>Value: Cell</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none><br> Variable: IsServiceConfigured()</p> @@ -4325,97 +4869,104 @@ name="_Toc126872356"></a><a name="_Toc115416287">Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993282"></a><a -name="_Toc126872359"></a><a name="_Toc115416290">Regkey:<br> +<h3><a name="_Toc115416290"></a><a name="_Toc139993282"></a><a +name="_Toc126872359"></a><span style='mso-bookmark:_Toc115416290'>Regkey:<br> [HKLM\SOFTWARE\OpenAFS\Client]<br> -[HKCU\SOFTWARE\OpenAFS\Client]</a></h3> +[HKCU\SOFTWARE\OpenAFS\Client]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:157.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;height:157.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:157.5pt'> - <h5><a name="_Toc139993283"></a><a name="_Toc126872360"></a><a - name="_Toc115416291">Value: ShowTrayIcon</a></h5> + <h5><a name="_Toc115416291"></a><a name="_Toc126872360"></a><a + name="_Toc139993283"></a><span style='mso-bookmark:_Toc115416291'>Value: + ShowTrayIcon</span></h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: 1<br> Function: InitApp(), Main_OnCheckTerminate()</p> - <p class=MsoBodyText>This value is used to determine whether or not a - shortcut should be maintained in the user's Start - Menu->Programs->Startup folder. </p> + <p class=MsoBodyText>This value is used to determine whether or not a shortcut + should be maintained in the user's Start Menu->Programs->Startup + folder. </p> <p class=MsoBodyText>This value used to be stored at [HKLM\Software\TransarcCorporation\AFS Client\AfsCreds].</p> <p class=MsoBodyText>The current user value is checked first; if it does not exist the local machine value is checked.</p> </td> </tr> - <tr style='height:119.0pt'> + <tr style='mso-yfti-irow:1;height:119.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:119.0pt'> - <h5><a name="_Toc139993284"></a><a name="_Toc126872361"></a><a - name="_Toc115416292">Value: EnableKFW</a></h5> + <h5><a name="_Toc115416292"></a><a name="_Toc126872361"></a><a + name="_Toc139993284"></a><span style='mso-bookmark:_Toc115416292'>Value: + EnableKFW</span></h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: 1<br> Function: KFW_is_available()</p> <p class=MsoBodyText>When MIT Kerberos for Windows can be loaded, Kerberos 5 - will be used to obtain AFS credentials. By setting this value to 0, the - internal Kerberos 4 implementation will be used instead. The current user - value is checked first; if it does not exist the local machine value is + will be used to obtain AFS credentials.  By setting this value to 0, the + internal Kerberos 4 implementation will be used instead.  The current + user value is checked first; if it does not exist the local machine value is checked.</p> </td> </tr> - <tr style='height:119.0pt'> + <tr style='mso-yfti-irow:2;height:119.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:119.0pt'> - <h5><a name="_Toc139993285"></a><a name="_Toc126872362"></a><a - name="_Toc115416293"></a><a name="_Value___: Use524"></a>Value: Use524</h5> + <h5><a name="_Value___:_Use524"></a><a name="_Toc115416293"></a><a + name="_Toc126872362"></a><a name="_Toc139993285"></a>Value: Use524</h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: 0<br> Function: KFW_use_krb524()</p> - <p class=MsoBodyText>When MIT Kerberos for Windows can be loaded, Kerberos 5 will - be used to obtain AFS credentials. By setting this value to 1, the Kerberos - 5 tickets will be converted to Kerberos 4 tokens via a call to the krb524 - daemon. The current user value is checked first; if it does not exist the - local machine value is checked.</p> + <p class=MsoBodyText>When MIT Kerberos for Windows can be loaded, Kerberos 5 + will be used to obtain AFS credentials.  By setting this value to 1, the + Kerberos 5 tickets will be converted to Kerberos 4 tokens via a call to the + krb524 daemon.  The current user value is checked first; if it does not + exist the local machine value is checked.</p> </td> </tr> - <tr style='height:251.5pt'> + <tr style='mso-yfti-irow:3;mso-yfti-lastrow:yes;height:251.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:251.5pt'> - <h5><a name="_Toc139993286"></a><a name="_Toc126872363"></a><a - name="_Toc115416294"></a><a name="_Value___: AfscredsShortcutParams"></a>Value: + <h5><a name="_Value___:_AfscredsShortcutParams"></a><a name="_Toc115416294"></a><a + name="_Toc126872363"></a><a name="_Toc139993286"></a>Value: AfscredsShortcutParams</h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: "-A -M -N -Q"<br> Function: Shortcut_FixStartup</p> <p class=MsoBodyText>This value specifies the command line options which - should be set as part of the shortcut to afscreds.exe. afscreds.exe rewrites - the shortcut each time it exits so as to ensure that the shortcut points to - the latest version of the program. This value is used to determine which - values should be used for command line parameters. The current user value is - checked first; if it does not exist the local machine value is checked.</p> + should be set as part of the shortcut to afscreds.exe.  afscreds.exe + rewrites the shortcut each time it exits so as to ensure that the shortcut + points to the latest version of the program.  This value is used to + determine which values should be used for command line parameters.  The + current user value is checked first; if it does not exist the local machine + value is checked.</p> <p class=MsoBodyText>The following subset of the command line options is appropriate for use in this registry setting:</p> <p class=MsoBodyText>-A = autoinit<br> -M = renew drive maps<br> -N = ip address change detection<br> - -Q = quiet mode. do not display start service dialog if afsd_service is not - already running<br> + -Q = quiet mode.  do not display start service dialog if afsd_service is + not already running<br> -S = show tokens dialog on startup<br> -Z = unmap drives</p> </td> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993287"></a><a -name="_Toc126872364"></a><a name="_Toc115416295">Regkey:<br> -[HKCU\SOFTWARE\OpenAFS\Client]</a></h3> +<h3><a name="_Toc115416295"></a><a name="_Toc139993287"></a><a +name="_Toc126872364"></a><span style='mso-bookmark:_Toc115416295'>Regkey:<br> +[HKCU\SOFTWARE\OpenAFS\Client]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:92.0pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:92.0pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:92.0pt'> - <h5><a name="_Toc139993288"></a><a name="_Toc126872365"></a><a - name="_Toc115416296">Value: Authentication Cell</a></h5> + <h5><a name="_Toc115416296"></a><a name="_Toc126872365"></a><a + name="_Toc139993288"></a><span style='mso-bookmark:_Toc115416296'>Value: + Authentication Cell</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none><br> Function: Afscreds.exe GetDefaultCell()</p> @@ -4425,16 +4976,19 @@ name="_Toc126872364"></a><a name="_Toc115416295">Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993289"></a><a -name="_Toc126872366"></a><a name="_Toc115416297">Regkey:<br> -[HKCU\SOFTWARE\OpenAFS\Client\Reminders]</a></h3> +<h3><a name="_Toc115416297"></a><a name="_Toc139993289"></a><a +name="_Toc126872366"></a><span style='mso-bookmark:_Toc115416297'>Regkey:<br> +[HKCU\SOFTWARE\OpenAFS\Client\Reminders]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:124.75pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:124.75pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:124.75pt'> - <h5><a name="_Toc139993290"></a><a name="_Toc126872367"></a><a - name="_Toc115416298">Value: "afs cell name"</a></h5> + <h5><a name="_Toc115416298"></a><a name="_Toc126872367"></a><a + name="_Toc139993290"></a><span style='mso-bookmark:_Toc115416298'>Value: + "afs cell name"</span></h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: <none><br> Function: LoadRemind(), SaveRemind()</p> @@ -4446,16 +5000,19 @@ name="_Toc126872366"></a><a name="_Toc115416297">Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993291"></a><a -name="_Toc126872368"></a><a name="_Toc115416299">Regkey:<br> -[HKCU\SOFTWARE\OpenAFS\Client\Active Maps]</a></h3> +<h3><a name="_Toc115416299"></a><a name="_Toc139993291"></a><a +name="_Toc126872368"></a><span style='mso-bookmark:_Toc115416299'>Regkey:<br> +[HKCU\SOFTWARE\OpenAFS\Client\Active Maps]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:98.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:98.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:98.5pt'> - <h5><a name="_Toc139993292"></a><a name="_Toc126872369"></a><a - name="_Toc115416300">Value: "upper case drive letter"</a></h5> + <h5><a name="_Toc115416300"></a><a name="_Toc126872369"></a><a + name="_Toc139993292"></a><span style='mso-bookmark:_Toc115416300'>Value: + "upper case drive letter"</span></h5> <p class=MsoBodyText>Type: DWORD {0, 1}<br> Default: <none></p> <p class=MsoBodyText>These values are used to store the persistence state of @@ -4465,47 +5022,56 @@ name="_Toc126872368"></a><a name="_Toc115416299">Regkey:<br> </tr> </table> -<h3 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993293"></a><a -name="_Toc126872370"></a><a name="_Toc115416301">Regkey:<br> -[HKCU\SOFTWARE\OpenAFS\Client\Mappings]</a></h3> +<h3><a name="_Toc115416301"></a><a name="_Toc139993293"></a><a +name="_Toc126872370"></a><span style='mso-bookmark:_Toc115416301'>Regkey:<br> +[HKCU\SOFTWARE\OpenAFS\Client\Mappings]</span></h3> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr style='height:98.5pt'> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:98.5pt'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt; height:98.5pt'> - <h5><a name="_Toc139993294"></a><a name="_Toc126872371"></a><a - name="_Toc115416302">Value: "upper case drive letter"</a></h5> + <h5><a name="_Toc115416302"></a><a name="_Toc126872371"></a><a + name="_Toc139993294"></a><span style='mso-bookmark:_Toc115416302'>Value: + "upper case drive letter"</span></h5> <p class=MsoBodyText>Type: REG_SZ<br> Default: <none></p> - <p class=MsoBodyText>These values are used to store the AFS path in UNIX - notation to which the drive letter is to be mapped.</p> + <p class=MsoBodyText>These values are used to store the AFS path in UNIX notation + to which the drive letter is to be mapped.</p> <p class=MsoBodyText>These values used to be stored in the afsdsbmt.ini file.</p> </td> </tr> </table> -<h2 style='margin-left:0pt;text-indent:0pt'><a name="_Toc139993295"></a><a -name="_Toc126872372"></a><a name="_Toc115417108"></a><a name="_Toc115416303">A.4 -OpenAFS Client Service Environment Variables</a></h2> +<h2><a name="_Toc115416303"></a><a name="_Toc139993295"></a><a +name="_Toc126872372"></a><a name="_Toc115417108"></a><span style='mso-bookmark: +_Toc115416303'>A.4 OpenAFS Client Service Environment Variables</span></h2> -<table class=MsoTableWeb1 border=1 cellspacing=3 cellpadding=0> - <tr> +<table class=MsoNormalTable border=1 cellspacing=3 cellpadding=0 + style='mso-cellspacing:2.2pt;mso-padding-alt:0pt 0pt 0pt 0pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h5><a name="_Toc139993296"></a><a name="_Toc126872373"></a><a - name="_Toc115416304">Variable: AFS_RPC_ENCRYPT</a></h5> - <p class=MsoBodyText>Values: "OFF" disables the use of RPC - encryption any other value allows RPC encryption to be used<br> - Default: RPC encryption is on</p> + <h5><a name="_Toc115416304"></a><a name="_Toc126872373"></a><a + name="_Toc139993296"></a><span style='mso-bookmark:_Toc115416304'>Variable: + AFS_RPC_ENCRYPT</span></h5> + <p class=MsoBodyText>Values:   "OFF" disables the use of + RPC encryption any other value allows RPC encryption to be used<br> + Default:  RPC encryption is on</p> </td> </tr> - <tr> + <tr style='mso-yfti-irow:1;mso-yfti-lastrow:yes'> <td width=590 valign=top style='width:442.8pt;padding:0pt 5.4pt 0pt 5.4pt'> - <h5><a name="_Toc139993297"></a><a name="_Toc126872374"></a><a - name="_Toc115416305">Variable: AFS_RPC_PROTSEQ</a></h5> - <p class=MsoBodyText>Values: "ncalrpc" - local RPC<br> - "ncacn_np" - named pipes<br> - "ncacn_ip_tcp" - tcp/ip<br> - Default: local RPC</p> + <h5><a name="_Toc115416305"></a><a name="_Toc126872374"></a><a + name="_Toc139993297"></a><span style='mso-bookmark:_Toc115416305'>Variable: + AFS_RPC_PROTSEQ</span></h5> + <p class=MsoBodyText>Values:            + "ncalrpc"  - local RPC<br> +                         + "ncacn_np" - named pipes<br> +                         + "ncacn_ip_tcp" - tcp/ip<br> + Default:  local RPC</p> </td> </tr> </table> diff --git a/src/WINNT/doc/install/Documentation/en_US/html/index.htm b/src/WINNT/doc/install/Documentation/en_US/html/index.htm index 3b00e6cc8c..8611b2a8a9 100755 --- a/src/WINNT/doc/install/Documentation/en_US/html/index.htm +++ b/src/WINNT/doc/install/Documentation/en_US/html/index.htm @@ -198,7 +198,7 @@ style='mso-fareast-font-family:"MS Mincho"'><o:p></o:p></span></p> <h1>OpenAFS for Windows</h1> -<h2>Version 1.5.8</h2> +<h2>Version 1.5.9</h2> <p class=MsoNormal><span style='mso-fareast-font-family:"MS Mincho"'>  <o:p></o:p></span></p> @@ -223,7 +223,7 @@ tab-stops:list 36.0pt'><![if !supportLists]><span style='font-family:Symbol; mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol'><span style='mso-list:Ignore'>·<span style='font:7.0pt "Times New Roman"'>         </span></span></span><![endif]><a -href="ReleaseNotes/frames.htm">OpenAFS for Windows +href="ReleaseNotes/frames.htm">OpenAFS for Windows 1.5.9 Release Notes</a></p> <p style='margin-left:36.0pt;text-indent:-18.0pt;mso-list:l0 level1 lfo1;