2 Registry keys and Environment Variables used in the Windows AFS Client
3 ----------------------------------------------------------------------
10 The service parameters primarily affect the behavior of the AFS client
11 service (afsd_service.exe).
14 [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]
21 LAN adapter number to use. This is the lana number of the LAN
22 adapter that the SMB server should bind to. If unspecified or set
23 to -1, a LAN adapter with named 'AFS' or a loopback adapter will be
24 selected. If neither are present, then all available adapters will
25 be bound to. When binding to a non-loopback adapter, the NetBIOS
26 name '%hostname%-AFS' will be used (where %hostname% is the NetBIOS
27 name of the host truncated to 11 characters). Otherwise, the NetBIOS
32 Default : 20480 (CM_CONFIGDEFAULT_CACHESIZE)
33 Variable: cm_initParams.cacheSize
35 Size of the AFS cache.
39 Default : 15 (CM_CONFIGDEFAULT_CHUNKSIZE)
40 Variable: cm_logChunkSize (cm_chunkSize = 1 << cm_logChunkSize)
42 Size of chunk for reading and writing. Actual chunk size is 2^cm_logChunkSize.
46 Default : 2 (CM_CONFIGDEFAULT_DAEMONS)
49 Number of background daemons (number of threads of
50 cm_BkgDaemon). (see cm_BkgDaemon in cm_daemon.c)
54 Default : 4 (CM_CONFIGDEFAULT_SVTHREADS)
55 Variable: numSvThreads
57 Number of SMB server threads (number of threads of smb_Server). (see
62 Default : 1000 (CM_CONFIGDEFAULT_STATS)
63 Variable: cm_initParams.nStatCaches
67 Value : LogoffTokenTransfer
70 Variable: smb_LogoffTokenTransfer
72 If enabled (set to 1), activates functionality where the user's
73 tokens are kept intact until smb_LogoffTokenTransferTimeout seconds
74 elapse after user logs off. If roaming profiles are used and the
75 roaming profile takes a long time to be written back, this ensures
76 that the tokens remain valid until the profile save is complete.
78 Value : LogoffTokenTransferTimeout
81 Variable: smb_LogoffTokenTransferTimeout
83 See LogoffTokenTransfer above.
88 Variable: cm_rootVolumeName
95 Variable: cm_mountRoot
97 Name of root mount point. In symlinks, if a path starts with
98 cm_mountRoot, it is assumed that the path is absolute (as opposed to
99 relative) and is adjusted accordingly. Eg: if a path is specified as
100 /afs/athena.mit.edu/foo/bar/baz and cm_mountRoot is "/afs", then the
101 path is interpreted as \\afs\all\athena.mit.edu\foo\bar\baz. If a
102 path does not start with with cm_mountRoot, the path is assumed to
103 be relative and suffixed to the reference directory (i.e. directory
104 where the symlink exists)
108 Default : "\AFSCache"
109 Variable: cm_CachePath
111 Location of on-disk cache file. The default implies the root
112 directory of the boot disk
117 Variable: traceOnPanic
119 Issues a breakpoint in the event of a panic. (breakpoint: _asm int 3).
124 Variable: cm_NetbiosName
126 Specifies the NetBIOS name to be used when binding to a Loopback
127 adapter. To provide the old behavior specify a value of
135 Select whether or not this AFS client should act as a gateway. If
136 set and the NetBIOS name hostname-AFS is bound to a physical NIC,
137 other machines in the subnet can access AFS via SMB connections to
140 When IsGateway is non-zero, the LAN adapter detection code will
141 avoid binding to a loopback adapter. This will ensure that the
142 NetBIOS name will be of the form hostname-AFS instead of the value
143 set by the "NetbiosName" registry value.
145 Value : ReportSessionStartups
148 Variable: reportSessionStartups
150 If enabled, all SMB sessions created are recorded in the Application
151 event log. This also enables other events such as drive mappings
152 or various error types to be logged.
154 Value : TraceBufferSize
156 Default : 5000 (CM_CONFIGDEFAULT_TRACEBUFSIZE)
157 Variable: traceBufSize
159 Number of entries to keep in trace log.
163 Default : "i386_nt40"
168 Value : SecurityLevel
173 Enables encryption on RX calls.
178 Variable: cm_dnsEnabled
180 Enables resolving volservers using AFSDB DNS queries. (see
181 afsdb-freelance-notes).
183 As of 1.3.60, this value is ignored as the DNS query support
184 utilizes the Win32 DNSQuery API which is available on Win2000
187 Value : FreelanceClient
190 Variable: cm_freelanceEnabled
192 Enables freelance client. (see afsdb-freelance-notes)
197 Variable: smb_hideDotFiles
199 Enables marking dotfiles with the hidden attribute. Dot files are
200 files whose name starts with a period (excluding "." and "..").
202 Value : MaxMpxRequests
205 Variable: smb_maxMpxRequests
207 Maximum number of multiplexed SMB requests that can be made.
209 Value : MaxVCPerServer
212 Variable: smb_maxVCPerServer
214 Maximum number of SMB virtual circuits.
219 Variable: rootCellName
221 Name of root cell (the cell from which root.afs should be mounted in
229 If enabled, does not send or indicate that we are able to send or
230 receive RX jumbograms.
237 If set to anything other than -1, uses that value as the maximum MTU
238 supported by the RX interface.
240 In order to enable OpenAFS to operate across the Cisco IPSec VPN
241 client, this value must be set to 1264 or smaller.
243 Value : ConnDeadTimeout
245 Default : 60 (seconds)
246 Variable: ConnDeadtimeout
248 The Connection Dead Time is enforced to be at a minimum 15 seconds
249 longer than the minimum SMB timeout as specified by
251 HKLM\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters
254 If the minimum SMB timeout is not specified the value is 45 seconds.
255 See http://support.microsoft.com:80/support/kb/articles/Q102/0/67.asp
258 Value : HardDeadTimeout
260 Default : 120 (seconds)
261 Variable: HardDeadtimeout
263 The Hard Dead Time is enforced to be at least double the ConnDeadTimeout.
264 The provides an opportunity for at least one retry.
270 Variable: allSubmount (smb.c)
272 By setting this value to 0, the "\\NetbiosName\all" mount point
273 will not be created. This allows the read-write versions of
274 root.afs to be hidden.
276 Value : NoFindLanaByName
280 Disables the attempt to identity the network adapter to use by
281 looking for an adapter with a display name of "AFS".
284 Type : DWORD {1..32} or {1..64} depending on the architecture
285 Default : <no default>
287 If this value is specified, afsd_service.exe will restrict itself
288 to executing on the specified number of CPUs if there are a greater
289 number installed in the machine.
291 NOTE: Setting this entry to "1" may be required on hyperthreaded
292 systems to avoid crashes in the RX library.
296 [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters\GlobalAutoMapper]
298 Value : <Drive Letter:> for example "G:"
301 Specifies the submount name to be mapped by afsd_service.exe at startup
302 to the provided drive letter.
307 [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]
310 2. Network provider parameters
311 ------------------------------
312 Affects the network provider (aklogon.dll).
315 [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]
317 Value : FailLoginsSilently
321 Do not display message boxes if the login fails.
324 [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\NetworkProvider]
330 Disables visible warnings during logon.
332 Value : AuthentProviderPath
334 NSIS : <install path>\afslogon.dll
336 Specifies the install location of the authentication provider dll.
342 Specifies the class of network provider
344 Value : DependOnGroup
348 Specifies the service groups upon which the AFS Client Service
349 depends. Windows should not attempt to start the AFS Client Service
350 until all of the services within these groups have successfully
353 Value : DependOnService
355 NSIS : Tcpip NETBIOS RpcSs
357 Specifies a list of services upon which the AFS Client Service
358 depends. Windows should not attempt to start the AFS Client Service
359 until all of the specified services have successfully started.
363 NSIS : depends on user configuration
365 0x00 - Integrated Logon is not used
366 0x01 - Integrated Logon is used
367 0x02 - High Security Mode is used
368 0x03 - Integrated Logon with High Security Mode is used
370 High Security Mode generates random SMB names for the creation of
371 Drive Mappings. This mode should not be used without Integrated Logon.
375 NSIS : <install path>\afscreds.exe -:%s -x
377 Specifies the command to be executed at the end of successful logon.
381 NSIS : "OpenAFSDaemon"
383 Specifies the display name of the AFS Client Service
387 NSIS : <install path>\afslogon.dll
389 Specifies the DLL to use for the network provider
391 Value : VerboseLogging
395 Determines the level of logging to be enabled
398 3. AFS Credentials System Tray Tool parameters
399 ----------------------------------------------
400 Affects the behavior of afscreds.exe
403 [HKLM\SYSTEM\CurrentControlSet\Services\TransarcAFSDaemon\Parameters]
408 Function: GetGatewayName()
410 If the AFS client is utilizing a gateway to obtain AFS access,
411 the name of the gateway is specified by this value.
416 Variable: IsServiceConfigured()
418 The value Cell is used to determine if the AFS Client Service has
419 been properly configured or not.
423 [HKLM\SOFTWARE\OpenAFS\Client]
424 [HKCU\SOFTWARE\OpenAFS\Client]
429 Function: InitApp(), Main_OnCheckTerminate()
431 This value is used to determine whether or not a shortcut should be
432 maintained in the user's Start Menu->Programs->Startup folder.
434 This value used to be stored at
435 [HKLM\Software\TransarcCorporation\AFS Client\AfsCreds].
440 Function: KFW_is_available()
442 When MIT Kerberos for Windows can be loaded, Kerberos 5 will be used
443 to obtain AFS credentials. By setting this value to 0, the internal
444 Kerberos 4 implementation will be used instead.
446 Value : AfscredsShortcutParams
448 Default : "-A -M -N -Q"
449 Function: Shortcut_FixStartup
451 This value specifies the command line options which should be set
452 as part of the shortcut to afscreds.exe.
456 [HKCU\SOFTWARE\OpenAFS\Client\Reminders]
458 Value : "afs cell name"
461 Function: LoadRemind(), SaveRemind()
463 These values are used to save and restore the state of the reminder
464 flag for each cell for which the user has obtained tokens.
466 This value used to be stored at
467 [HKLM\Software\TransarcCorporation\AFS Client\AfsCreds].
470 ENVIRONMENT VARIABLES:
472 Variable: AFS_RPC_ENCRYPT
473 Values: "OFF" disables the use of RPC encryption
474 any other value allows RPC encryption to be used
475 Default: RPC encryption is on
478 Variable: AFS_RPC_PROTSEQ
479 Values: "ncalrpc" - local RPC
480 "ncacn_np" - named pipes
481 "ncacn_ip_tcp" - tcp/ip