From: Jeffrey Altman Date: Mon, 1 Oct 2007 03:22:07 +0000 (+0000) Subject: add descriptions of credential flags, identity icons, and push-pins X-Git-Tag: krb5-1.7-alpha1~834 X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=3c67ca0a927ce73e61ec9c9c1b036ae1aed9e72b;p=krb5.git add descriptions of credential flags, identity icons, and push-pins update screen shots add credits to Fermilabs and Stanford University. other changes for kfw 3.2.2 release. ticket: 5789 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20027 dc483132-0cff-0310-8789-dd5450dbe970 --- diff --git a/src/windows/identity/help/html/about_netidmgr.htm b/src/windows/identity/help/html/about_netidmgr.htm index 14c0e2020..440831606 100644 --- a/src/windows/identity/help/html/about_netidmgr.htm +++ b/src/windows/identity/help/html/about_netidmgr.htm @@ -1,68 +1,57 @@ + - About Network Identity Manager - - - +About Network Identity Manager + + + +

About Network Identity Manager

- -

-This is strictly an informative page about the origins of Network -Identity Manager. +

This is strictly an informative page about the origins of Network Identity Manager.

-

In the beginning

- -

-Network Identity Manager was conceived as an identity management -solution to make up for the shortcomings of Leash32 (distributed with -MIT Kerberos for Windows) and AFSCreds (distributed with OpenAFS). -

- -

-The work started as Unified Credentials Manager, a final project for -the MIT course 6.831 : User Interface Design and Implementation, -taught by Professor Rob -Miller. By the time actual code was written, it was named -Khimaira (which was later changed to Network Identity Manager around -October, 2005). Traces of the name Khimaira might still exist in the -source code. -

- -

-Khimaira was presented at the AFS and Kerberos Best Practices -Workshop 2005. The slides can be found on the workshop website and here. +

Network Identity Manager was conceived as an identity management solution to +make up for the shortcomings of Leash32 (distributed with MIT Kerberos for Windows) +and AFSCreds (distributed with OpenAFS).

+

The work started as Unified Credentials Manager, a final project for the MIT +course 6.831 : User Interface Design and Implementation, taught by +Professor Rob Miller. By the time +actual code was written, it was named Khimaira (which was later changed to Network +Identity Manager around October, 2005). Traces of the name Khimaira might still +exist in the source code.

+

Khimaira: +A Unified Interface for AFS and Kerberos was presented at the +AFS and +Kerberos Best Practices Workshop 2005.

+

A second talk, +Developing +plug-ins for Network Identity Manager, was presented at +AFS and Kerberos Best Practice +Workshop 2006.

+

The development of Network Identity Manager has been financially supported +(in alphabetical order) by Fermi National +Accelerator Laboratory, +MIT Information +Services and Technology, NASA Jet Propulsion +Laboratory, Secure Endpoints Inc., +and Stanford University.

- -

-The work on Network Identity Manager was supported by MIT Information Services and -Technology, NASA Jet Propulsion Laboratory, -and Secure Endpoints Inc.. -

-

Design

- -

-A plugin based architecture was chosen so that support for additional -credential types and features could be added without making changes to -the mainline code. In addition to making the application easily -extensible, this also allows the AFS plugin to be maintained within -the OpenAFS code base and separates the code supporting Kerberos 5 and -Kerberos 4. Furthermore, it is anticipated that this would encourage -third party developers to develop plugins for NetIDMgr. -

- -

-More information about the concepts used in the design of Network -Identity Manager can be found here. -

+

A plug-in based architecture was chosen so that support for additional credential +types and features could be added without making changes to the mainline code. In +addition to making the application easily extensible, this also allows the AFS plug-in +to be maintained within the OpenAFS code base and separates the code supporting +Kerberos v5 and Kerberos v4 permitting Kerberos v4 to be easily removed from the +Kerberos for Windows distribution. Furthermore, it is anticipated that this would encourage +third party developers to develop plug-ins for Network Identity Manager.  +As of September 2007, a Kerberized Certificate Authority credential provider and +a Grid credential provider are available from third parties.

+

More information about the concepts used in the design of Network Identity Manager +can be found here.

- \ No newline at end of file + + diff --git a/src/windows/identity/help/html/act_new_creds.htm b/src/windows/identity/help/html/act_new_creds.htm index 7c15be30a..b329a1adf 100644 --- a/src/windows/identity/help/html/act_new_creds.htm +++ b/src/windows/identity/help/html/act_new_creds.htm @@ -16,7 +16,7 @@ -

Network Identity Manager - New Credentials

+

a Network Identity Manager - New Credentials

The new credentials dialog can be invoked from the Credentials menu, by typing -

Expanded view of the new credentials dialogg

+

Expanded view of the new credentials dialog

The expanded view provides access to additional options available for diff --git a/src/windows/identity/help/html/act_set_default.htm b/src/windows/identity/help/html/act_set_default.htm index dce442c43..b6628fac4 100644 --- a/src/windows/identity/help/html/act_set_default.htm +++ b/src/windows/identity/help/html/act_set_default.htm @@ -11,10 +11,20 @@

One identity can be designated as the default identity. The default identity is the -identity used by Kerberos v5 and GSS-API based applications which use the default -Kerberos v5 credential cache and -never request the use of a network identity by name. +identity used by Kerberos v5 and GSS-API based applications which use the +default Kerberos v5 credential cache and do not request the use of a network identity by name.

+

+The following methods can be used to set an identity as the default identity:

+
    +
  1. In the NetIdMgr application window, select the desired identity and + choose the Credentials->Set Default menu item.
    2. +
  2. In the NetIdMgr application window, select the desired identity, click + the right mouse button, and choose the Set as default menu item.
    3. +
  3. Click the right mouse button on the NetIdMgr notification icon.  + Choose the desired identity on the Set Default sub-menu.
    4. +
+

 

\ No newline at end of file diff --git a/src/windows/identity/help/html/cmdline_netidmgr.htm b/src/windows/identity/help/html/cmdline_netidmgr.htm index 8767460bc..4e11eec90 100644 --- a/src/windows/identity/help/html/cmdline_netidmgr.htm +++ b/src/windows/identity/help/html/cmdline_netidmgr.htm @@ -32,6 +32,18 @@ Signal the running instance of Network Identity Manager to exit + + --show + Open the Network Identity Manager application window of a running instance. + + + --hide + Hide the Network Identity Manager application window of a running instance. + + + --minimize + Open the Network Identity Manager application window in minimized mode. + diff --git a/src/windows/identity/help/html/concept_identity.htm b/src/windows/identity/help/html/concept_identity.htm index c573ed9d5..ee84920bf 100644 --- a/src/windows/identity/help/html/concept_identity.htm +++ b/src/windows/identity/help/html/concept_identity.htm @@ -1,33 +1,35 @@ + - Network Identity Manager Concepts: Identity - - - +Network Identity Manager Concepts: Identity + + + +

Network Identity Manager Concepts: Identity

- -

While there are many approaches to defining what an identity is, as -far as the Network Identity Manager (NetIDMgr) is considered, an identity is the unique -user identifier that is accepted by a network service. Each credential -that is managed by NetIDMgr is assumed to map to a single identity. -The collection of credentials that map to a single identity is -considered to belong to that identity. -

- -

-

- - +

While there are many approaches to defining what an identity is, as far as the +Network Identity Manager (NetIDMgr) is concerned, an identity is the unique user +identifier that is accepted by a network service. Each credential that is managed +by NetIDMgr is assumed to map to a single identity. The collection of credentials +that map to a single identity is considered to belong to that identity.

+

+

Default Identity

+

The default identity is the identity that will be used by applications when a +specific identity is not requested. The Kerberos v5 plug-in will mark the +credential cache that contains the default identity as the default credentials cache +for the current logon session.

+

Most applications that implement GSS-API or Kerberos v5 authentication assume +that there is only one Kerberos v5 credential cache and one identity in use by +the user at a time.  These applications use the default identity.  In +general, if the application does not have a configuration option permitting the +specification of a Kerberos v5 principal, the default identity will be used.

+

 

+ -

The default identity is the identity that will be used by -applications when a specific identity has not been requested. -The Kerberos v5 plug-in will mark the credential cache that -contains the default identity as the default credentials -cache for the current logon session. -

- \ No newline at end of file + + diff --git a/src/windows/identity/help/html/howdoi.htm b/src/windows/identity/help/html/howdoi.htm index 3b2c2a336..4c49e0d89 100644 --- a/src/windows/identity/help/html/howdoi.htm +++ b/src/windows/identity/help/html/howdoi.htm @@ -22,21 +22,22 @@
  • Get new credentials
    • -
  • Destroy credentials
    • +
  • Renew credentials
  • Import credentials from the MSLSA cache
    • -
  • Renew credentials
    • +
  • Destroy credentials
  • Change password
    • +
  • Setting the default identity

    • Credentials view

    diff --git a/src/windows/identity/help/html/images/flag-critical.bmp b/src/windows/identity/help/html/images/flag-critical.bmp new file mode 100644 index 000000000..d643fb317 Binary files /dev/null and b/src/windows/identity/help/html/images/flag-critical.bmp differ diff --git a/src/windows/identity/help/html/images/flag-warning.bmp b/src/windows/identity/help/html/images/flag-warning.bmp new file mode 100644 index 000000000..edb3fc3c8 Binary files /dev/null and b/src/windows/identity/help/html/images/flag-warning.bmp differ diff --git a/src/windows/identity/help/html/images/flag_expired.bmp b/src/windows/identity/help/html/images/flag_expired.bmp new file mode 100644 index 000000000..a3a40feec Binary files /dev/null and b/src/windows/identity/help/html/images/flag_expired.bmp differ diff --git a/src/windows/identity/help/html/images/flag_renewable.bmp b/src/windows/identity/help/html/images/flag_renewable.bmp new file mode 100644 index 000000000..3a9dc386f Binary files /dev/null and b/src/windows/identity/help/html/images/flag_renewable.bmp differ diff --git a/src/windows/identity/help/html/images/id-sm.bmp b/src/windows/identity/help/html/images/id-sm.bmp new file mode 100644 index 000000000..6edfb07d9 Binary files /dev/null and b/src/windows/identity/help/html/images/id-sm.bmp differ diff --git a/src/windows/identity/help/html/images/notification_icon_menu.png b/src/windows/identity/help/html/images/notification_icon_menu.png index ab75b74d1..e5b9a13ad 100644 Binary files a/src/windows/identity/help/html/images/notification_icon_menu.png and b/src/windows/identity/help/html/images/notification_icon_menu.png differ diff --git a/src/windows/identity/help/html/images/screen_config_cred_provider.png b/src/windows/identity/help/html/images/screen_config_cred_provider.png index 5c72a0616..aedb90f3a 100644 Binary files a/src/windows/identity/help/html/images/screen_config_cred_provider.png and b/src/windows/identity/help/html/images/screen_config_cred_provider.png differ diff --git a/src/windows/identity/help/html/images/screen_config_ident_provider.png b/src/windows/identity/help/html/images/screen_config_ident_provider.png index 2ab9c4d7e..8c709046d 100644 Binary files a/src/windows/identity/help/html/images/screen_config_ident_provider.png and b/src/windows/identity/help/html/images/screen_config_ident_provider.png differ diff --git a/src/windows/identity/help/html/images/wdg_collapsed_hi.bmp b/src/windows/identity/help/html/images/wdg_collapsed_hi.bmp new file mode 100644 index 000000000..cb06b8acb Binary files /dev/null and b/src/windows/identity/help/html/images/wdg_collapsed_hi.bmp differ diff --git a/src/windows/identity/help/html/images/wdg_expanded_hi.bmp b/src/windows/identity/help/html/images/wdg_expanded_hi.bmp new file mode 100644 index 000000000..8180b3333 Binary files /dev/null and b/src/windows/identity/help/html/images/wdg_expanded_hi.bmp differ diff --git a/src/windows/identity/help/html/images/wdg_stick_hi.bmp b/src/windows/identity/help/html/images/wdg_stick_hi.bmp new file mode 100644 index 000000000..8857fec22 Binary files /dev/null and b/src/windows/identity/help/html/images/wdg_stick_hi.bmp differ diff --git a/src/windows/identity/help/html/images/wdg_stuck_hi.bmp b/src/windows/identity/help/html/images/wdg_stuck_hi.bmp new file mode 100644 index 000000000..3b7807129 Binary files /dev/null and b/src/windows/identity/help/html/images/wdg_stuck_hi.bmp differ diff --git a/src/windows/identity/help/html/menu_view.htm b/src/windows/identity/help/html/menu_view.htm index d2a4987a5..2e231457a 100644 --- a/src/windows/identity/help/html/menu_view.htm +++ b/src/windows/identity/help/html/menu_view.htm @@ -10,10 +10,10 @@

    Network Identity Manager - View Menu

    -Click an item on the menu to go to the description of the action, or -choose from the list below. You can activate the by pressing Alt + V and you can activate each action by -pressing the highlited character. +Click an item on the menu to go to the description of the action, or choose from +the list below. You can activate the View Menu by pressing Alt + V and you can activate each action by pressing the +highlighted character.

    @@ -43,6 +43,11 @@ and their current status. In the advanced mode, NetIdMgr provides a customizable list of all discovered credentials. +

  • All identities: Toggles +the inclusion of all configured identities in the NetIdMgr identity lists.  +If all identities is unchecked, only the default identity, pinned identities, +and identities with credentials are included in the NetIdMgr identity lists.
    • +
  • View columns: Only available in Advanced mode. @@ -70,7 +75,7 @@ display. where the credentials are grouped by the location where they are stored in. For Kerberos 5, the location is the name of the credentials cache in which the tickets are stored, and for AFS, - the locatino is always the cache manager. Individual credential providers choose the interpretation of the location property as the concept of location changes from type to type.
    • diff --git a/src/windows/identity/help/html/use_config.htm b/src/windows/identity/help/html/use_config.htm index 76b498ac1..02e22a641 100644 --- a/src/windows/identity/help/html/use_config.htm +++ b/src/windows/identity/help/html/use_config.htm @@ -62,7 +62,7 @@ than 1/4 of its original lifetime left) and so on.

  • -

    Plugins: Enable/disable and check the status of +

    Plug-ins: Enable/disable and check the status of registered plug-ins. Enabling or disabling a plug-in only takes effect after a restart of NetIDMgr.

    • diff --git a/src/windows/identity/help/html/use_icon.htm b/src/windows/identity/help/html/use_icon.htm index 85e05fdb3..bb8af5225 100644 --- a/src/windows/identity/help/html/use_icon.htm +++ b/src/windows/identity/help/html/use_icon.htm @@ -53,11 +53,12 @@ operations. 

    diff --git a/src/windows/identity/help/html/using.htm b/src/windows/identity/help/html/using.htm index c9808effa..7b5520147 100644 --- a/src/windows/identity/help/html/using.htm +++ b/src/windows/identity/help/html/using.htm @@ -39,14 +39,15 @@ Brief overviews of how to perform common tasks are linked below:

    diff --git a/src/windows/identity/help/html/welcome.htm b/src/windows/identity/help/html/welcome.htm index a7b1f53b1..a12c1d37d 100644 --- a/src/windows/identity/help/html/welcome.htm +++ b/src/windows/identity/help/html/welcome.htm @@ -21,7 +21,7 @@ secure access to network services.  When NetIDMgr is used with Kerberos v5 network identity is a unique Kerberos principal name and the credentials are Kerberos v5 tickets.  Kerberos v5 tickets can be used by NetIDMgr to obtain Andrew File System (AFS) tokens and X.509 public key certificates if the -appropriate plug-ins are available.

    +appropriate plug-ins are installed.

    When you log into Microsoft Windows with a domain account, your account name and the Windows Domain name when combined form a Kerberos principal name.  As an example, “WINDOWS\jaltman” is actually a short form @@ -93,8 +93,8 @@ Windows.  The KCA plug-in is distributed by

    Getting started

    diff --git a/src/windows/identity/help/html/wnd_main.htm b/src/windows/identity/help/html/wnd_main.htm index dd9885446..85707cd6e 100644 --- a/src/windows/identity/help/html/wnd_main.htm +++ b/src/windows/identity/help/html/wnd_main.htm @@ -1,87 +1,114 @@ - - Network Identity Manager - Application Window - - - - - - - - - + +Network Identity Manager - Application Window + + + + + + + + + + +

    Network Identity Manager - Application Window

    - -

    The application window of Network Identity Manager can be displayed in two modes: basic and advanced.

    - -

    The basic view provides status information of the currently available identities whereas the advanced -view provides more detailed information of all the active credentials.

    - +

    The application window of Network Identity Manager can be displayed in two modes: +basic and advanced.

    +

    The basic view provides status information of the currently available identities +whereas the advanced view provides more detailed information of all the active credentials.

    - +

    Figure 1. Network Identity Manager Basic View

    -
    - - -

    Figure 2. Network Identity Manager Advanced View

    + +

    Figure 2. Network Identity Manager Advanced View

    -
      -
    1. Menu bar
      2. -
    2. Tool bar
      3. -
    3. Credentials list
      4. - +
    4. Menu bar
      5. +
    5. Tool bar
      6. +
    6. Credentials list
    -

    Identity views

    - -

    -The default credentials view organizes them grouped by identity name -and then by credential type. Each credential is then shown under each -group heading sorted by the credential name. The default headings for -the credential view provides you with a minimal amount of information -to reduce clutter. If you wish you can add columns to the display -using the Choose columns... action on the -View menu. -

    - -

    -The header backgrounds and the credential rows change color if the -credentials are about to expire or are expired. - -

    +

    In its default configuration, the NetIdMgr advanced view displays +a list of network identity names (aka Kerberos principals, user@REALM).  Each +entry appears with a + +or +button, a pushpin +or   +button and an Identity icon +to its left. 

    +

    Click on the + +button of an identity to expand the branch, displaying a + +button.  Click on the +button to hide the branch.

    +

    Click on the pushpin +or   +button to pin the identity to the display.  A pinned identity will be +displayed in the identity list regardless of whether or not it has matching +credentials.

    +

    Click on the Identity icon +to view the identity's properties dialog.

    +

    To the right of each credential is a flag icon representing +one of the following states:

    +

                    +None      = credentials are valid

    +

                    + +           += credentials are valid and renewable

    +

    +           += credentials are valid and the initial expiration warning has been issued

    +

    + +           += credentials are valid and the final expiration warning has been issued

    +

    + +           += credentials are invalid or expired

    +

     

    +

     

    +

    - \ No newline at end of file + +