Remote login on existing networks

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Hi.

We have an existing infrastructure based on MIT Kerberos 5, OpenLDAP
over GSSAPI (so kerberized) and OpenAFS (also kerberized). I'd like to
make all the windows clients log in in this way:

- authenticate to MIT kerberos 5
- profile is set on \\AFS\cell.name\usr\USERNAME_FIRST_LETTER\USERNAME
- don't store any informations about the user locally

How can I do this?
--
Sensei <mailto:senseiwa@tin.it>
<icqnum:241572242>
<msn-id:Sensei_Sen@hotmail.com>

A)bort, R)etry, I)nfluence with large hammer.

 

[Guest]

Archived from groups: microsoft.public.windowsxp.work_remotely (More info?)

Generally this is out of the scope of this newsgroup, but I found a
reference that will solve the first two problems... See
http://www.coe.uncc.edu/~rmdyer/krblogon.htm for more information and
example scripts.

As for the third question, you won't be able to do this while the user
is logged in - Windows will create a local profile. Now you can set
the machine to remove it when the user logs off, but it still will be
on the local system while the user is logged on.

Jeffrey Randow (Windows Networking & Smart Display MVP)
jeffreyr-support@remotenetworktechnology.com

Please post all responses to the newsgroups for the benefit
of all USENET users. Messages sent via email may or may not
be answered depending on time availability....

Remote Networking Technology Support Site -
http://www.remotenetworktechnology.com
Windows XP Expert Zone - http://www.microsoft.com/windowsxp/expertzone

On Thu, 29 Jul 2004 19:15:41 GMT, Sensei <noone@nowhere.org> wrote:

>Hi.
>
>We have an existing infrastructure based on MIT Kerberos 5, OpenLDAP
>over GSSAPI (so kerberized) and OpenAFS (also kerberized). I'd like to
>make all the windows clients log in in this way:
>
>- authenticate to MIT kerberos 5
>- profile is set on \\AFS\cell.name\usr\USERNAME_FIRST_LETTER\USERNAME
>- don't store any informations about the user locally
>
>How can I do this?