openafs/doc
Jeffrey Altman e2d6d9bf2e windows-winlogon-logon-event-20050414
Apparently the problem with multi-domain forests with cross-
 realm trusts to non-Windows realms was not entirely solved.
 The authentication to the AFS SMB service failed because
 the wrong name was being used.  Using ASU as an example,
 the authentication was being performed with the name
 "QAAD\user" (an account in the forest root) and not
 "user@ASU.EDU (the MIT Kerberos principal used to login with)

 The solution was to add an additional dependency on KFW
 in order or to be able to easily obtain the client principal
 name stored in the MSLSA ccache TGT.  This information is
 used in two locations:

 - the pioctl() function

 - a new WinLogon Event Handler for the "logon" event.

 The pioctl function will now be able to use the correct
 name when calling WNetAddConnection2() and the "logon"
 event handler will now be able to call WNetAddConnection2().
 The hope is that the "logon" event handler will be called
 before the profile is loaded but I have not guarrantee
 that will happen.
2005-04-14 06:46:34 +00:00
..
examples provide an example CellAlias file. 2002-07-16 18:39:50 +00:00
html afsmonitor-update-stat-descriptions-20040729 2004-07-29 05:29:33 +00:00
pdf initial-pdf-with-embedded-cmr-fonts-20010606 2001-06-06 18:58:13 +00:00
txt windows-winlogon-logon-event-20050414 2005-04-14 06:46:34 +00:00
LICENSE license-update-20050403 2005-04-03 20:37:29 +00:00