I do use Orca and create transforms. I need to know what needs to be modified in the MSI to stop the Log On dialog box from appearing.
Thanks, Hugh Caldwell Astor & Sanders EWeb Systems Administrator United States Geological Survey 703-648-6812 (Office) 703-598-3472 (Cellular) [email protected] Room 2C123B From: John Perkins <[email protected]> To: Hugh Caldwell <[email protected]> Cc: [email protected] Date: 02/01/2010 12:13 PM Subject: Re: [OpenAFS] Custom MSI Question Sent by: [email protected] Hugh Caldwell wrote: > > Hello, > > I've been tasked with creating a custom msi for our organization and > have a question that I'm hoping the list can help me with. > > Basically I need to disable integrated authentication. I've discovered > that setting the > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider\LogonOptions=dword:00000000 > > disables the integrated authentication but a log on window still > appears when the users log on to the workstation. Toggling "Obtain AFS > tokens when logging into Windows" in the afs_config app stops this > behavior. Could someone tell me what settings are being adjusted by > the check box in the afs_config app? > > If that isn't clear this is the behavior that I'm seeing. > > Create and install an msi with the Logon Option set to 0. > Logon to windows and the afs logon window pops up. > Go into afs_config and enable the "Optain AFS tokens" checkbox. > Log off and back on and get an authentication error. > Go into afs_config and disable the "Optain AFS tokens" checkbox > Log off and back on and no window pops up. This is the behavior that I > would like to have when my msi is first installed. We make similar changes to our AFS installation at install time (along with setting the cell name, enabling dynroot, etc.). I suggest you load a copy of Orca--available from Microsoft, I believe--and generate a transform for the AFS MSI package to change the LogonOptions registry key and any other registry settings you care to make. If you want to make a transformed MSI, use msitran.exe to do that (also available from Microsoft). Otherwise you can apply the transform at install time using msiexec: msiexec /i openafs-en_US-1-5-6900.msi /qn /log C:\temp\afs_install-1_5_6900.log TRANSFORMS=transform.mst when you do the initial AFS installation. If you have any other site configuration parameters to make, you may want to add those to the transform you generate. -- ========================================================================= John Perkins | University of Wisconsin-Madison Researcher | Department of Computer Science [email protected] | 1210 W. Dayton St. 608-262-0438/608-262-6626 FAX | Madison, WI 53706-1685 ========================================================================= _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
