Tim: The AFS Client Service cannot map drives in the user session because it does not exist within the user session. The AFS Systray tool already has a mechanism by which it will create drive mappings for a user session if they are listed in the HKCU portion of the registry but as you are probably aware, that tool is being replaced with a non-AFS specific credential manager, Khimaira, that will be debuting in KFW 3.0.
If you really want a drive letter, you could simply install a short
program in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run that
creates the mapping. You can even bundle the addition of this tool
into an arizona.edu transformed version of the OpenAFS MSI for your
users.
Could you explain how you would have OpenAFS deny the user the ability
to execute "NET USE G: /D"?
Thanks.
Jeffrey Altman
Tim Spriggs wrote:
> yay for deprecation! :) They are finally moving away from DOS!
>
> Is there any way of getting around this? I could make a startup script,
> I'm sure, to map the drive if it doesn't exist but that seems a little
> hackish. I like the idea of having a drive letter for our users even
> though it is easy for _me_ to tell them they should type in \\AFS\(cell
> name)\... somewhere and map it.
>
> Suggestion from the peanuts gallery:
>
> It seems like the global drives feature might simply be implemented
> differently. Since the common user can see drive mappings made by the
> administrator in the global drives configuration area, the AFS client
> could try to map those as user mounts for an individual session. This way
> openafs still has the ability to do the "global drive" in the sense of
> users seeing system-administrator default mappings.
>
> Furthermore, if the same behavior is expected from global mappings then
> the unmount operation could be denied from openafs.
>
> /Suggestion
>
> Thanks!
> -Tim
>
> /++--._.--++\ . _.-._
> \|/ /+
> | /|\ /| _.-._.-._ <{
> + | |/ \ \_
> /_\ _|_ | | ^=-._
> \
> Lunar and Planetary Lab }>
> (520) 626 - 4991 -- SS 416 _/
> _______________________________________.-=$/ <|>
>
> 1629 E. University Blvd.
> University of Arizona
>
> On Tue, 13 Sep 2005, Jeffrey Altman wrote:
>
>
>>Global drive mappings are not supported by Microsoft. They are
>>deprecated and are not guaranteed to have reliable behavior
>>after Windows 2000. The functionality is expected to disappear entirely
>>in a future release.
>>
>>http://rt.central.org/rt/Ticket/Display.html?id=15160
>>
>>Jeffrey Altman
>>
>>Tim Spriggs wrote:
>>
>>
>>>Hello All,
>>>
>>>When I create a global drive as Administrator on a windows 2003 Terminal
>>>Server I can't see the drive as a normal user through My Computer. However
>>>the drive is listed in the client configuration utility as the normal
>>>user.
>>>
>>>I have read through the notes online and I don't see anything related to
>>>this, am I missing something?
>>>
>>>Thanks,
>>>-Tim
>>>
>>> /++--._.--++\ . _.-._
>>> \|/ /+
>>> | /|\ /| _.-._.-._ <{
>>> + | |/ \ \_
>>> /_\ _|_ | | ^=-._
>>> \
>>>Lunar and Planetary Lab }>
>>>(520) 626 - 4991 -- SS 416 _/
>>>_______________________________________.-=$/ <|>
>>>
>>>1629 E. University Blvd.
>>>University of Arizona
>>>
>>>_______________________________________________
>>>OpenAFS-devel mailing list
>>>[email protected]
>>>https://lists.openafs.org/mailman/listinfo/openafs-devel
>>
>
> _______________________________________________
> OpenAFS-devel mailing list
> [email protected]
> https://lists.openafs.org/mailman/listinfo/openafs-devel
begin:vcard fn:Jeffrey Altman n:Altman;Jeffrey org:Secure Endpoints Inc. adr:;;255 W 94TH ST PHB;NEW YORK;NY;10025;United States email;internet:[EMAIL PROTECTED] title:President tel;work:+1 212 769-9018 x-mozilla-html:TRUE url:http://www.secure-endpoints.com version:2.1 end:vcard
smime.p7s
Description: S/MIME Cryptographic Signature
