OpenAFS for Windows Release Notes TOC

1. Installer Options

2. System Requirements

2.1 Supported Operating Systems

2.1.1 Unsupported Operating Systems

2.2 Disk Space

2.3 Additional Software

3. Operational Notes

3.1. Requirements for Kerberos 5 Authentication

3.1.1. Active Directory

3.1.2. Using the krb524 service

3.2. Use of the Microsoft Loopback Adapter

3.3. Using Freelance (Dynamic Root) Mode to Improve Mobility

3.4. Locating AFS Volume Database Servers

3.5. Obtaining AFS Tokens as a Part of Windows Logon

3.6. AFS System Tray Command Line Options

3.7. The “AFS Client Admins” Authorization Group

3.8. OpenAFS support for UNC paths

3.9. OpenAFS includes aklog.exe

3.10. OpenAFS Servers on Windows are Unsupported

3.11. OpenAFS Debugging Symbol files

3.12. Maximum File Size is 2GB

3.13. Encrypted AFS File Access

3.14. Authenticated Access to the OpenAFS Client Service

3.15. No More INI Files

3.16. Microsoft Windows Internet Connection Firewall

3.17. Browsing AFS from the Explorer Shell and Office

3.18. Byte Range Locking

3.19. Automatic Discarding of AFS Tokens at Logoff

3.20. Terminal Server installations

3.21. Hidden Dot Files

3.22. Status Cache Limits

3.23. NETBIOS over TCP/IP must be enabled

3.24. OpenAFS binaries are digitally signed

3.25. Maximum Size of the AFSCache File

3.26. Filename Character Sets

3.27. Known Character Set Issues with Roaming Profiles

3.28. The AFSCache File

3.29. Restricting OpenAFS Client Service Start and Stop

3.30. The @sys Name List

3.31. Symlinks to AFS UNC paths

3.32. Cache Manager Debugging Now Supported

3.33. Windows Logon Caching vs. Kerberos Logons

3.34. Initial Server Preferences

3.35. File Timestamps

3.36. Windows RPC client support must be installed

3.37. Generating Minidumps of the OpenAFS Client Service

3.38. AFS Client Universally Unique Identifiers

4. How to Debug Problems with OpenAFS for Windows:

4.1. pioctl debugging (IoctlDebug registry key)

4.2. afsd_service initialization log (%WinDir%\TEMP\afsd_init.log)

4.3. afsd_service debug logs (fs trace {-on, -off, -dump} ->%WinDir%\TEMP\afsd.log)

4.4. Using SysInternal’s DbgView and FileMon Tools

4.5. Microsoft MiniDumps (fs minidump -> %WinDir%\TEMP\afsd.dmp)

4.6. Single Sign-on (Integrated Logon) debugging

4.7. RX (AFS RPC) debugging (rxdebug)

4.8. Cache Manager debugging (cmdebug)

4.9. Persistent Cache consistency check

5. Reporting Bugs:

6. How to Contribute to the Development of OpenAFS for Windows

6.1. The USENIX OpenAFS Fund

6.2. Secure Endpoints Inc.

6.3. The MIT Kerberos Account

6.4. Direct contributions of code and/or documentation

6.5. OpenAFS for Windows Mailing Lists

7. MSI Deployment Guide

7.1. Introduction

7.1.1 Requirements

7.1.2 Authoring a Transform

7.2. Configuration Options

7.2.1 Configurable Properties

7.2.1.1 Setting Properties

7.2.1.2 OpenAFS for Windows Properties

(Service parameters):

(Network provider):

(OpenAFS Client):

7.2.1.2.1 Registry Properties

7.2.1.2.2 AFSCreds.exe Properties

7.2.2 Existing Registry Entries

7.2.3 Replacing Configuration Files

7.2.3.1 Components for Configuration Files

7.2.4 Adding Domain Specific Registry Keys

7.2.5 Adding Site Specific Freelance Registry Keys

7.3 Additional Resources

7.4. Upgrades

Appendix A: Registry Values

A.1. Service parameters

Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

Value: LogoffPreserveTokens

Value: RootVolume

Value: Mountroot

Value: CachePath

Value: NonPersistentCaching

Value: ReportSessionStartups

Value: TraceBufferSize

Value: SysName

Value: SecurityLevel

Value: UseDNS

Value: FreelanceClient

Value: HideDotFiles

Value: MaxMpxRequests

Value: MaxVCPerServer

Value: Cell

Value: RxNoJumbo

Value: RxMaxMTU

Value: ConnDeadTimeout

Value: HardDeadTimeout

Value: TraceOption

Value: AllSubmount

Value: NoFindLanaByName

Value: MaxCPUs

Value: smbAuthType

Value: MaxLogSize

Value: FlushOnHibernate

Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters\GlobalAutoMapper]

Value: <Drive Letter:> for example "G:"

Regkey: [HKLM\SOFTWARE\OpenAFS\Client]

Value: CellServDBDir

Value: VerifyServiceSignature

Value: IoctlDebug

Value: MiniDumpType

Value: StoreAnsiFilenames

Regkey: [HKLM\SOFTWARE\OpenAFS\Client\CSCPolicy]

Value: "smb/cifs share name"

Regkey: [HKLM\SOFTWARE\OpenAFS\Client\Freelance]

Value: "numeric value"

Regkey: [HKLM\SOFTWARE\OpenAFS\Client\Freelance\Symlinks

Value: "numeric value"

Regkey: [HKLM\SOFTWARE\OpenAFS\Client\Submounts]

Value: "submount name"

Regkey: [HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\VLDB]

Value: "hostname or ip address"

Regkey: [HKLM\SOFTWARE\OpenAFS\Client\Server Preferences\File]

Value: "hostname or ip address"

A.2. Integrated Logon Network provider parameters

Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

Value: FailLoginsSilently

Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]

Value: NoWarnings

Value: AuthentProviderPath

Value: Class

Value: DependOnGroup

Value: DependOnService

Value: Name

Value: ProviderPath

A.2.1 Domain specific configuration keys for the Network Provider

[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]

[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain]

[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain"domain name"]

[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]

Example:

A.2.1.1 Domain specific configuration values

[HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider] [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain] [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain"domain name"] [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\Domain\LOCALHOST]

Value: LogonOptions

Value: FailLoginsSilentl

Value: LogonScript

Value: LoginRetryInterval

Value: LoginSleepInterval

Value: TheseCells

A.2.1.2 Selection of effective values for domain specific configuration

A.2.1.3 Exceptions to A.2.1.2

2.1.3.1 'FailLoginsSilently'

2.1.3.2 'LogonScript'

A.3. AFS Credentials System Tray Tool parameters

Regkey: [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]

Value: Gateway

Value: Cell

Regkey: [HKLM\SOFTWARE\OpenAFS\Client] [HKCU\SOFTWARE\OpenAFS\Client]

Value: ShowTrayIcon

Value: EnableKFW

Value: Use524

Value: AfscredsShortcutParams

Regkey: [HKCU\SOFTWARE\OpenAFS\Client]

Value: Authentication Cell

Regkey: [HKCU\SOFTWARE\OpenAFS\Client\Reminders]

Value: "afs cell name"

Regkey: [HKCU\SOFTWARE\OpenAFS\Client\Active Maps]

Value: "upper case drive letter"

Regkey: [HKCU\SOFTWARE\OpenAFS\Client\Mappings]

Value: "upper case drive letter"

A.4 OpenAFS Client Service Environment Variables

Variable: AFS_RPC_ENCRYPT

Variable: AFS_RPC_PROTSEQ