Re: post m37 WINNT Patch

Matt Benjamin wrote:
> The rest is mostly what you expect.  Here's a rundown:
> 
> 1. I made the env_afs_rxk5_default() call in src/WINNT/aklog look like
> the src/aklog--is that correct

On Windows, configuration parameters such as this should be obtained via
the registry.  There should be machine (HKLM) and per-user (HKCU)
configuration.   Preferably on a per-cell basis.  These values should be
integrated into the configuration within the NIM AFS plug-in.

> 3. I worked around your narrowing of the prototype for ktc_SetK5Token--I
> am not trying to be annoying, just not sure if I can lose aclient
> param--I had the Windows code passing smbname there, and that is needed
> for integrated authentication (I think).  If your revert this again, can
> you suggest another approach?

The Windows code can have a separate prototype.  The Windows code has to
use both a combination of pioctl and RPC in order to set the token and
its associated key.  The code cannot be shared with the Unix code base
so there is no need to share the prototypes.

> 4. I updated my bogus kerberos 1.4.4/3.1.0-b2 for Windows to have and
> export Jeff Altmans new MIT decrypt ticket functions, and folded them
> into the afs interface

I hope that when KFW 3.2 Beta is released that you will be able to stop
distributing your private KFW.

Jeffrey Altman