From 533be201c3d19b309a65b7ddae7ebd499f7eed40 Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Mon, 1 Oct 2007 23:53:20 +0000 Subject: [PATCH] pull up r20027 from trunk r20027@cathode-dark-space: jaltman | 2007-09-30 23:22:07 -0400 ticket: 5789 add descriptions of credential flags, identity icons, and push-pins update screen shots add credits to Fermilabs and Stanford University. other changes for kfw 3.2.2 release. ticket: 5789 version_fixed: 1.6.3 git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@20068 dc483132-0cff-0310-8789-dd5450dbe970 --- .../identity/help/html/about_netidmgr.htm | 101 +++++------ .../identity/help/html/act_new_creds.htm | 4 +- .../identity/help/html/act_set_default.htm | 16 +- .../identity/help/html/cmdline_netidmgr.htm | 12 ++ .../identity/help/html/concept_identity.htm | 50 +++--- src/windows/identity/help/html/howdoi.htm | 7 +- .../help/html/images/flag-critical.bmp | Bin 0 -> 822 bytes .../help/html/images/flag-warning.bmp | Bin 0 -> 822 bytes .../help/html/images/flag_expired.bmp | Bin 0 -> 774 bytes .../help/html/images/flag_renewable.bmp | Bin 0 -> 1334 bytes .../identity/help/html/images/id-sm.bmp | Bin 0 -> 822 bytes .../html/images/notification_icon_menu.png | Bin 7038 -> 8069 bytes .../images/screen_config_cred_provider.png | Bin 25843 -> 26005 bytes .../images/screen_config_ident_provider.png | Bin 26029 -> 28809 bytes .../help/html/images/wdg_collapsed_hi.bmp | Bin 0 -> 774 bytes .../help/html/images/wdg_expanded_hi.bmp | Bin 0 -> 774 bytes .../help/html/images/wdg_stick_hi.bmp | Bin 0 -> 774 bytes .../help/html/images/wdg_stuck_hi.bmp | Bin 0 -> 774 bytes src/windows/identity/help/html/menu_view.htm | 15 +- src/windows/identity/help/html/use_config.htm | 2 +- src/windows/identity/help/html/use_icon.htm | 7 +- src/windows/identity/help/html/using.htm | 7 +- src/windows/identity/help/html/welcome.htm | 6 +- src/windows/identity/help/html/wnd_main.htm | 167 ++++++++++-------- 24 files changed, 221 insertions(+), 173 deletions(-) create mode 100644 src/windows/identity/help/html/images/flag-critical.bmp create mode 100644 src/windows/identity/help/html/images/flag-warning.bmp create mode 100644 src/windows/identity/help/html/images/flag_expired.bmp create mode 100644 src/windows/identity/help/html/images/flag_renewable.bmp create mode 100644 src/windows/identity/help/html/images/id-sm.bmp create mode 100644 src/windows/identity/help/html/images/wdg_collapsed_hi.bmp create mode 100644 src/windows/identity/help/html/images/wdg_expanded_hi.bmp create mode 100644 src/windows/identity/help/html/images/wdg_stick_hi.bmp create mode 100644 src/windows/identity/help/html/images/wdg_stuck_hi.bmp diff --git a/src/windows/identity/help/html/about_netidmgr.htm b/src/windows/identity/help/html/about_netidmgr.htm index 14c0e2020..440831606 100644 --- a/src/windows/identity/help/html/about_netidmgr.htm +++ b/src/windows/identity/help/html/about_netidmgr.htm @@ -1,68 +1,57 @@ + - About Network Identity Manager - - - +About Network Identity Manager + + + +

About Network Identity Manager

- -

-This is strictly an informative page about the origins of Network -Identity Manager. +

This is strictly an informative page about the origins of Network Identity Manager.

In the beginning

- -

-Network Identity Manager was conceived as an identity management -solution to make up for the shortcomings of Leash32 (distributed with -MIT Kerberos for Windows) and AFSCreds (distributed with OpenAFS). -

- -

-The work started as Unified Credentials Manager, a final project for -the MIT course 6.831 : User Interface Design and Implementation, -taught by Professor Rob -Miller. By the time actual code was written, it was named -Khimaira (which was later changed to Network Identity Manager around -October, 2005). Traces of the name Khimaira might still exist in the -source code. -

- -

-Khimaira was presented at the AFS and Kerberos Best Practices -Workshop 2005. The slides can be found on the workshop website and here. +

Network Identity Manager was conceived as an identity management solution to +make up for the shortcomings of Leash32 (distributed with MIT Kerberos for Windows) +and AFSCreds (distributed with OpenAFS).

The work started as Unified Credentials Manager, a final project for the MIT +course 6.831 : User Interface Design and Implementation, taught by +Professor Rob Miller. By the time +actual code was written, it was named Khimaira (which was later changed to Network +Identity Manager around October, 2005). Traces of the name Khimaira might still +exist in the source code.

Khimaira: +A Unified Interface for AFS and Kerberos was presented at the +AFS and +Kerberos Best Practices Workshop 2005.

A second talk, +Developing +plug-ins for Network Identity Manager, was presented at +AFS and Kerberos Best Practice +Workshop 2006.

The development of Network Identity Manager has been financially supported +(in alphabetical order) by Fermi National +Accelerator Laboratory, +MIT Information +Services and Technology, NASA Jet Propulsion +Laboratory, Secure Endpoints Inc., +and Stanford University.

- -

-The work on Network Identity Manager was supported by MIT Information Services and -Technology, NASA Jet Propulsion Laboratory, -and Secure Endpoints Inc.. -

Design

- -

-A plugin based architecture was chosen so that support for additional -credential types and features could be added without making changes to -the mainline code. In addition to making the application easily -extensible, this also allows the AFS plugin to be maintained within -the OpenAFS code base and separates the code supporting Kerberos 5 and -Kerberos 4. Furthermore, it is anticipated that this would encourage -third party developers to develop plugins for NetIDMgr. -

- -

-More information about the concepts used in the design of Network -Identity Manager can be found here. -

A plug-in based architecture was chosen so that support for additional credential +types and features could be added without making changes to the mainline code. In +addition to making the application easily extensible, this also allows the AFS plug-in +to be maintained within the OpenAFS code base and separates the code supporting +Kerberos v5 and Kerberos v4 permitting Kerberos v4 to be easily removed from the +Kerberos for Windows distribution. Furthermore, it is anticipated that this would encourage +third party developers to develop plug-ins for Network Identity Manager. +As of September 2007, a Kerberized Certificate Authority credential provider and +a Grid credential provider are available from third parties.

More information about the concepts used in the design of Network Identity Manager +can be found here.

- \ No newline at end of file + + diff --git a/src/windows/identity/help/html/act_new_creds.htm b/src/windows/identity/help/html/act_new_creds.htm index 7c15be30a..b329a1adf 100644 --- a/src/windows/identity/help/html/act_new_creds.htm +++ b/src/windows/identity/help/html/act_new_creds.htm @@ -16,7 +16,7 @@ -

Network Identity Manager - New Credentials

a Network Identity Manager - New Credentials

The new credentials dialog can be invoked from the Credentials menu, by typing -

Expanded view of the new credentials dialogg

Expanded view of the new credentials dialog

The expanded view provides access to additional options available for diff --git a/src/windows/identity/help/html/act_set_default.htm b/src/windows/identity/help/html/act_set_default.htm index dce442c43..b6628fac4 100644 --- a/src/windows/identity/help/html/act_set_default.htm +++ b/src/windows/identity/help/html/act_set_default.htm @@ -11,10 +11,20 @@

One identity can be designated as the default identity. The default identity is the -identity used by Kerberos v5 and GSS-API based applications which use the default -Kerberos v5 credential cache and -never request the use of a network identity by name. +identity used by Kerberos v5 and GSS-API based applications which use the +default Kerberos v5 credential cache and do not request the use of a network identity by name.

+The following methods can be used to set an identity as the default identity:

In the NetIdMgr application window, select the desired identity and + choose the Credentials->Set Default menu item.
In the NetIdMgr application window, select the desired identity, click + the right mouse button, and choose the Set as default menu item.
Click the right mouse button on the NetIdMgr notification icon. + Choose the desired identity on the Set Default sub-menu.

\ No newline at end of file diff --git a/src/windows/identity/help/html/cmdline_netidmgr.htm b/src/windows/identity/help/html/cmdline_netidmgr.htm index 8767460bc..4e11eec90 100644 --- a/src/windows/identity/help/html/cmdline_netidmgr.htm +++ b/src/windows/identity/help/html/cmdline_netidmgr.htm @@ -32,6 +32,18 @@ Signal the running instance of Network Identity Manager to exit + + --show + Open the Network Identity Manager application window of a running instance. + + + --hide + Hide the Network Identity Manager application window of a running instance. + + + --minimize + Open the Network Identity Manager application window in minimized mode. + diff --git a/src/windows/identity/help/html/concept_identity.htm b/src/windows/identity/help/html/concept_identity.htm index c573ed9d5..ee84920bf 100644 --- a/src/windows/identity/help/html/concept_identity.htm +++ b/src/windows/identity/help/html/concept_identity.htm @@ -1,33 +1,35 @@ + - Network Identity Manager Concepts: Identity - - - +Network Identity Manager Concepts: Identity + + + +

Network Identity Manager Concepts: Identity

- -

While there are many approaches to defining what an identity is, as -far as the Network Identity Manager (NetIDMgr) is considered, an identity is the unique -user identifier that is accepted by a network service. Each credential -that is managed by NetIDMgr is assumed to map to a single identity. -The collection of credentials that map to a single identity is -considered to belong to that identity. -

- -

- - +

While there are many approaches to defining what an identity is, as far as the +Network Identity Manager (NetIDMgr) is concerned, an identity is the unique user +identifier that is accepted by a network service. Each credential that is managed +by NetIDMgr is assumed to map to a single identity. The collection of credentials +that map to a single identity is considered to belong to that identity.

Default Identity

The default identity is the identity that will be used by applications when a +specific identity is not requested. The Kerberos v5 plug-in will mark the +credential cache that contains the default identity as the default credentials cache +for the current logon session.

Most applications that implement GSS-API or Kerberos v5 authentication assume +that there is only one Kerberos v5 credential cache and one identity in use by +the user at a time. These applications use the default identity. In +general, if the application does not have a configuration option permitting the +specification of a Kerberos v5 principal, the default identity will be used.

+ -

The default identity is the identity that will be used by -applications when a specific identity has not been requested. -The Kerberos v5 plug-in will mark the credential cache that -contains the default identity as the default credentials -cache for the current logon session. -

- \ No newline at end of file + + diff --git a/src/windows/identity/help/html/howdoi.htm b/src/windows/identity/help/html/howdoi.htm index 3b2c2a336..4c49e0d89 100644 --- a/src/windows/identity/help/html/howdoi.htm +++ b/src/windows/identity/help/html/howdoi.htm @@ -22,21 +22,22 @@

Get new credentials

Destroy credentials

Renew credentials

Import credentials from the MSLSA cache

Renew credentials

Destroy credentials

Change password

Setting the default identity

Credentials view

diff --git a/src/windows/identity/help/html/images/flag-critical.bmp b/src/windows/identity/help/html/images/flag-critical.bmp new file mode 100644 index 0000000000000000000000000000000000000000..d643fb31799d8d6ceac0eae8315e7bef993a5745 GIT binary patch literal 822 zcmbVKA#B_*6iqYfK*2N(RK-I>g@py>D;yXoC@4HoP!LcM5O~1gK!8Dj!2yGSfPjE# zI$&TB;7I`i1_l8J0RaZ5y~~fPk%8^&`{()nXUG5B_upM%Ns{Q_Io|W zJO5CJ*4b3MaXSA63}V$AAq43;=V@yiqph`vuJTpw1;0ZpX*_s*A@6Q19(eWCfD<{Z7b^PxR_81wWD1y zfc)5{vby6PmgMDn9;H-W*SwTpcHQPpr?o!zrn5t-b)0k{kwX8mADzb-!$ooV+Q2`* zDOr{`OkZVPS(TU)zZV?ak{-3ApIjT%i)H`=z|mn$0e;jTq;r<^-h0%Dmbm$RxoUKH i3~&INBBEE2k$!0ingLt*dBOwOcka)Npfu_KDgFjV+C?Ef(L-_4CE+^{On(5Q2{TMo7-0I!W^)gC z^!zELwPz5>;J=H5uY@3&{XSQIyW4v2Z)3XjC-p)gVQL|GEgGTY@u+;BKQOapcNgLZ zNp~T1LOUT2a^({$$c?jARVsft6dQJrb|j*bNrKmpjxplhmB{EUj+&-ceqWb!PIEb3 zbzlN^=GjYW$E7e-JT}Tdm}cf8bSbF-AO7%$E$-3NO>dO%x~>?WG!Aw|?-&;X&z$UP z8ZoySr|s~h{4n$wZ{C^rKFzG$6B(L*I;y5|W<82HLf}H>r*Ygj)qJogS*h9S024%o`ti(TFjLh2AbGm3$q9TMdwI)5z!u96ilY~gdZ1z(JeBD226Rt TuS258AD|F|d0mHB{-5%1wIE^R literal 0 HcmV?d00001 diff --git a/src/windows/identity/help/html/images/flag_expired.bmp b/src/windows/identity/help/html/images/flag_expired.bmp new file mode 100644 index 0000000000000000000000000000000000000000..a3a40feecff222d6782d44a2e13ab4b51114b589 GIT binary patch literal 774 zcmX|;A&jFy6o%Q^WW|ZO&5F%t1>!_=L9AF&u>w)CVv{o`Dk>0&6%`0XMFpaw0-tGN)^ZMq!ZyqzRlOH$N%Ahg)cdT2i zuUJ>g1H7XAW{UEQ(;50>+b%m$|}T`2-CJuDwSaMEhN<>N{tfw{XTSE$7W*_ zrf;Hbm(d&b(DGWS89K`CG9;-0K@*@fst^nTqtOVC-406=B;p>h(GlTY>7UP)(Kg9K#>_7!HT%bUOInDnL;x zV09LXp}_N8$g%{nCc-jJY@6FiUMArNE;yA#tyZJESD>3Z-B&`vC}23Iz4{$YCKKqI zhF}=Lc5G-}4VtB)*Xu!cWUvYg%dt?V+O)1(C^yRpf&ewD3ukb!+cwprhN@5bbpdKq zg=mOyT^Ih9Pc@iO4O9#U0~m&Zl$C<-w{dn>gjAQ1zD&cR%*{pvRi_HAL+6_s#^W)% zgDzzrq1)|3wq;Zm1r@VGc|C}A%4%6iTWN3_hYIDBDcfi~x;gIzzwe&;A%0NczY36h z_K9K6lSwAYoHGn9E*7MV3;s=his$*~i-e@5r@sVV$e-|;48KLli@9&H*#1c@vmc8^ zmI>L4XU}r8`(NVgx%CeVge=d$3{7)9ADx}w4y_Tgn@BtfM`<44IXKmg6vkQh4@@qICr*&1qN3si0#Sh=*#x2zQHhwCKulIlR8&?@AdwY_$qEFb zk|q-s69`1bi4!L-`wl9aK)dzJ-OD@p@x8}`=`+8#T5-fD?1$67vmV>)*6DtC=;Ho% zoj-m(@4UfiNGe$$(qtZx9Wp|6iN>~#H6fcb2CUCln{+l}fPEtHoD4iM3H5lbgjCJp z6D1gVWEOb%yNqJr?ePk{7NRLOvBxmJP_PH0}KwqAvgpdAh-v2hrmE^4}-e~2?0U^1Shy9xa;7s zlijmt_gg!AzW&ku&gp*DU9Vo)5Es^OTX) zd*lV(R$5IO0H{yGxwpUo0O%x?AksQMriUgtbtE&HE7q+odQD3@0tT--tTQKPJ`HuG z!(zWEIWe=P+A(KWbr8%RxG}Ogq7TEZ!ZwK~h<;pF7lgh;rvsi4`C`YSK!9zDpn~A& zqTo(0oQz82Hu57+^()_tAX-V}F*POm;HlQDI_7)7efM;HACxb?{W|EjpIH6j85anE z&X)*a+_P;91^|EXpymlA0^qVe)%-qtrtIH1U_e|l!JrFe^Ch>PjUyQ#VE@vS;N8P#O~ zt}OR!vK7J}Ro4oc5M^3~l$IZH%~;8&^=P@4%r_wvv6atPJmfVsx!H(yKLKokPveFa zqLIDEVDTY<=1c)igHD9Zr_%3r=DUueaQWU0-y%J$Kb;!7C*SRQR^+r{-N3M_XaWS;yM%Lb5Ih>tsZ1Ncp^&qtnRQ5nuPTExD}X8-@uRMdEdcph*>dw)9u? zD*PmJC!7;Q^cikR&b0`3vq@nyW4 zCmdb_uPH5^dCS5u!GpKqlbwjgElKU6iWx}0fL<+OPNCUHR?E%^oritChRm2Z0(iCs zNv~S5Iio4X3Xwjlq|-yIN}G5R(51r>_rO+j)`ot>9K(q3Afx89>-7~)2=|#5davI} z$K0tM6BuImg&nB*t9>Hy{d1hsG}9PQDycW?c6Pajk%FRASdjAB6RxJ6(aUjLx#a~W z8GrBZu!VjS^movN*oJ6zZ=25YvCxoGXk+es*LBEDdV09X`=SmNF|s`BO6!#a3v?D1 zW*LE^cxEdG{@(SI1!dgeCOs5Nr8f)SL$rdg`nd9_r~QSkF68GXfiK*a*rKy6H+8xE z-X3WB;>^GVjI%5Q3Oc;v^pRrC|?j_rVT^4@`;5=g6Xir>WWT7|01w zfXzN)gVFBMfaomQQt6F9^yWmcfbTfifRK1lfen+-^dGfR3RiqWfTlZKAlew2^V5HJ zsToJ<|0O*PGbJtx5N#-tYuPUf0YH8gPJ-M{fp8Q}e}BKZ%BN!TTY~Pf)vJyg+9!6} zZxp=9Tc}DgersPt@|g9ny2YD<&b@EN1Al)xFY8(i+-8E}h076x3*gvH%+SFW?=NOg zt&eJhS66}MJx?Q#rU)B7=dlpk-?}>CyzfC8Xy_k_Jdf#|cTD~CRzt?FuFRHKpU%6x z{}Ona-XCSz>eU#xzuO$L-e70tSe#u_^^bKB&sk{EL(69SK%6kHs8!V6=<;Fk)v8#- zzPmyquDDytrsDDT3fIGMynU+8$S2-}t{ZLVWrm5TkrYxtb5ph#68UcDB+eQQ2Vl zUrloNoDH3|OqA-=EjN4^??Cvg)F#=R39Rcr8J3uJcT@0Rx}IA^*O&JXxtV_4U5_D7 zxBmm-Od+0B4ciqSo|4OosnmTZwKo(VImc=12JInCFV$_>q{gZRnJ69{C(tk*hP6 z$80wf0rj)pa;sBx5T@dKFQRmq4q68t@b!K$u-sh_$tP%_d+1^fG|exKbK8%wR2--E z_bN1hdYek*Ih4l6Z{}n1aC_<8^U!je(ZgGVT~yKg@<)8Hwk_$kMJD5Fog0z@)b%I!lZpj54nswYyG^ z&%C6F1-&frWC?`k_2Wdjc3IHHgo06vR18N#6tf2B??;Ur>JyJ?*Q2SSnb9lAoc^)y^_(D(1owT$ze5Gy&KGf~fblpEslC zM2aXE1vfEGj`bTKxmg|R55JVp#Ptf|pzd9*Sz}I%6k)#BtFa36Bwg&zmP?>eXk-Mp z3PmLddKOXsRQ_bV5LOA>lW|Jp6@m_X;1(huGWkMbHU&zyNP-@W#EyV1oxdTTnZ952 zo`Msi*?XZkJj7EvR{nR3CS4R}jUZtA$9~K#za5pFGP?7js?Zdws>6f@fijDPmTjT9 zJ>EncS&&JQ5S1SV0Z{Q7(sky72|S=;DAILw$!QE!HhQG%=mH%`6a@k_QwyRxz#wMi zTBQZc3xh$={w?KL$a2t!wf!&oqOIF&M=L9|u1h{i9~hJ9j!$cu8j84pFFBCGS*YJk zh>FVhK2u`FzghX3lqa#hQ$~llqLExUR~lnoy!|;aXZSXn*9DYJjSQKI_iDzN_<8N) z{TL>-`v@=RD(&?O|Mta!N!Q)Luvd?7ZHnaU_9{CRY!Wi$8s!)!|@u&-;BlARPP^=y7s?bH4p6dyqiTMn4ba_0ZJjcjK^Vc(LjR9yXGYo1nf-gBT8EAMHBTS{tc+kJa9SJ2`2`Pmuxc_5}8?Q9zMH=ebF z)Rk8UEa@yd>ve|phLsvJB$ZgGExjV1`lf}Kyk{klfWzilGA`53g9zTn_Y#j(wlw}r zUqe`Fy$>?Was>WP?9b`Pk#n2YnWMN@9}s>0-3OIL{1(CAuF&{WA0E#^ZBQUnu2GeT zeSPniyJb^`+dv9kDi8afN(AFQ*~~CA<-O}p_}lGrne;|tvw!UAFyl?f+LHT%nV-vW z`qliz-;qr&la92M-%J(46kc1ESC$_FH`+u#XDkum9|_v9(P6v35qF)sC3rL$EW~Vv z`?E&XQZ8DD1#WJk@L!^{(W}=nFJgrnO1NVDveZ(^pDI(& zm-I*6iVAl=9Q3RP?T;PZ|622R?mReMU1_tuTj-1W^7?uW&Fl7hq1i#d+He!ZzAE;2 zfa(nIZk6BmCv|;0=iJ||fS*a2WsUj7BKtf#UFrPR;jRdO=5kh<(T>gHO+1&=@SS@v zHO8klp_nrvREYRO#!wUd-|N*SFQ-Q``Gu=Z8te}zf9p#MTb|TouoZF#GcqRB-Ds**%e%|(IAKo5viH$- z&ivfzCERUbD1&?FzXpU9W#+Jc3)MAh*ZI3KZpcY8Y`!BNcz=xq>G!F#qq*YVhYK?^ zGxN*K%QG_rD~;m!!#Xj_trhHj1t+k45>ib@ZS^@wDPc%4&A4DH#FH}Ko$Pls`ykP- zC=r3!F8|(Ky=9qd=H$dg{a6p;PT$s+)spQlBWS}+S5~Kv{VhGDb17a+rXb zlTWMpar=fLa&@kY%Z^z&4P(7F9`s%ZgSbTM5#!)PpbG`=EU7NnF;`OI@h{<3A^XV^ z*(iLP#EyP!xoEJA8e_)^N@@l!NmzC`5kzT8eg0A1;b$HqzLc?Dj4lUFJ>psDTWzBv z@Agk6WH)l+hCBPojb7g)(~0QU1SDnKCm@23f+-N`%@SJA>y!17@&<4#_g;n0nppo8 z%qzhS45~yDsl8-+*(kib8Mvl*Jsmx)ea_vn6bZC2h6pzd84#Q13!MxCN{Cq)CIP}U ztTX5)z;*EHEy#{n2c#j64h2syJPS)lNT!P2c-^>DRN$ zoWJvEvJ!fGT31GRd;Wp?Bpr<^A{sXYm(GggqEA>){K_^i|8Jb+Z?V!%^~-7#!776p z3VYJu0Q81L%Mg0Bb&vl7~5*4 z*pN!Z^MSDAJBaR*gA1Y%FO8o$3oXaa%MF`M-L423ON9znoM*W z4V4Ya)<0tlb)cfoF#OM4+y^ho@Q@_R4-Aq+0zOHvygsGBJDN0zGM!WN0CT|xORTVR|o%$1OD{kA58HuVB+9d~`@N#GoRCKiHf}lvA zKKyt}8su+)ZC~RQ5t2umZ__ht%%%1;+{5zy*iT1t%CkImGM>aK0&wi!jVW)6!@b^f%)CgImdw@bGE4UJw1&`z<~}y zpO;i1ko3b(BGh?*d23uvX=h-sAy%o_@9_HNpIz{OhROgmiF>1lz#tlAQ2*^CFo+QKM_N)UN-)@qP-7!fK}}%n z|AP_zpUfa>fmzP0lsY&rdTcCMtLXhw+o`#=z9!-Kwh%CqUnoy^k(vnt$<&Yt%aEJ~ zUu<<=MFKUF+@Jpv)~_-C`B>U2OUR{2^feT>5e})iYC{&idXJS(-=v*c&)LU4h1b_o zcNr`A@-jr${=UDSzw5<#Vbg`z0zYJBW_Qm%JUkq}*uSl;k$9LxIWY6fW<0Q^DBf)~ zQo*QS`yVDfe|}`%|6P6Ovag58;$JsKK+SlzANPY!Q&X|(g693bY+R)vc;mD9Dd-y2UvlOwH|p`mK{!t^_+c1XKdv6u zaP`2q+ONX6JR1=9j`thS6*7nL+p+K4tYUHrM0R9;Y|)s>odNF33}T1{B)l4iRff%= zGgCNml!hbbIP;yK!&7F6k(4O+@&0_Im{#h;b!vcrhSZ0}PBXK!r6l#di(e@Bf`?}6 zLA#&xYjQ*)Nr4c~d~&maD0x(KO5wAsQE>!4c`RJI$BmE29ktCLJF1&us)fN~BZOr7YGGPXr&N;eR4 zw6ah|GJ52`A$_HHF}%MfKGx&C|BNb=TP!Tds?o(CXTl2H(V`q8_UG7lLuNSLlu&`1+%fVME)w> z+UC{Ca{agfci_qxd1>eQ5(<>X6yR4)zk!g729C$jbI087Oy{CK}zB4?|5^+Txu1q7405Si!S9LhuA*zj9xeO4ujoNvgwi~+ofltnX zr+rgVrngu6W^Rb_xTm8b9QCffL0eUylf-iE{5akZ2j__>WU*wZ|8&C|oy7U%eMUaD zYbr~kE;LQr{iVtk>!+sqg=bN$makx_p& zoWbeqw;`8WBURi2xlBFVQ?S$#IcV$u4`$4qor7%qBIS~drS7(BYmDy5{Krg(1A_*O zVr2C=ee;5ho9|0s8@n5e7Tq?T*RBC@UKf}7;zv*$V*7`B#ZNI$TfFd7uL-;i<8LC8 zKNS%v=0M6>Bo24CIEsqve|~s8*H@z*Q7^El^|ncT`_NxXMJDxJ(Jq-wr+e%&(Y!9S9?fN3OAUbFeCl9W~k%e+qezN?Y2)MKHvuUlUi=$q8^ zNioNX)-5G3eO!C}->$bUQ(J6wUL9<#S$f$lym{^0O5 z9kkcx{Pl4__&mu3r)KYykKr|cg(pdbn$B{eTa+y)3rx~P#=S(s1#fqjr9uKcA+b?J z_*^!B0D_F`V7z^ltK-EkaXo6$y5=(fpsPRo_)@Nu zg?LkaG0N&Jm-&XInqgRmgZzbL9cRZTaY_rP+WoAtQ+Ye}3x%B@+b8MIX! z1l*?oWlmGuX8PjxNamDxTVt6($JHsZ-}Ymj_pgUPmv^<75&?c=SdCIQCH#n&r`{=Z z$%Qgg|BB~t~0CYf}DyX*}?ygVQcb!5Y{Ij^D6 z3E5&nM+LE~qF`?TkSq^NIW!sxDiL^q5Nc#|WDBeWB*eA~hWp<0s~TtiO^>obMWG3a z1kOC6q}=8@&B#0IPg4n9l~1MUFS9u_Rdt+By_~VEIy!g&z;w1vQq5d^dy)kLM{xJY zI8hTo6}DcE#pMD;%2nerwW)B@7Guw{%^1q>>u;Ca2L}*n>0Q+DmY4DF4*9@N*Py(0 zFN*sS)3+4!BBQ@d?wgR`K%<=ZpK*yOwm4 z498YEd$J40+-&+7GZBxjY;0@~Y8d^Nw`%pZH=NG3PTAMs5^TigelAhCPBw4& z;L%ct`paE^9s3_1tgQn0V?zCUXTbt1;(fQI4>E}I7|!*g^k!+}bARc1July$L+<9t zp9L~1D{fz%ipsz`4dSe-MESViMh>eFE7-(72vYKK5GCAs!+bEMI%6BP1yLs)RoD05 z!{v@ao<&eERiavW^5n`1O*_U?AW2EOvLu??Pa?;}_0EgK?8SOXL6MTleC$4}g2Dz) zrJH9zlyowIeQV`e!=VoiO@13J^nF1Kp)m699f^v&>nWCs!uR#F@mw4;;qbtwSMOd! z-D_rO@;@!b#kS_f@pH@w8jSM@Xr!f@Sa8))7P)=Sl9#ag0uQMcY8m}h5H|Dh!S|dqkfKEIv8l&vPE+?pWH+0m};rA&1m%Cr2Kv1MreoS6=NGj_Lui{N}@fa$i)nu`UaRLMj}xGxpLVRx!aWdbma zxaxgwr=n+7_oisbgL|FP6XTf$1Xhjlu1yT~kw|lf6T>z0r0pou@B)9589FghGjUB5 z*eTB`o?Tyb;O7QJ{;>dc`@#By&aP&r#TqFwLdh$-y8DQ(vaoeFBb zI=y*b$~QV6spDCH68~I5+cpwy#&NKs@Og*+je?DD;uPY(CHkylwyr9mxp8?qrh*6` z+J30`-66a?CIKI>UmiSWNu^Wv+b$5d?};5Q zX)9XI`%;w-T6(-$=DTZeRY@HCdk9_gMz*tnCpycx(vDsTm7eV_V>J60*YNH~3rtb` z0Ggt67_TS?=Nx>d*vGM}P-X&%ZKBHehSQ~nXBPr1CjF^?(Weg|$h!#Mj(whd~vcPF}71||g*6P>5#|EI_p#VuSQPACj zk(wEeSsH=_wQrdJkKRKt2r55`CyR^3#c#mtpcL##ZkhveOXPobfRfxBNR5nn=zjrm Ch&!nO literal 7038 zcmb_>WmHsA+x9SY4<$%9NQs2B)X+ING?F4A-Jqnz3^h^;NDc@iF{E@#cZW!K2ue%( zjqkUfAMg6!wcbD9pL5PWd+)W+y7qnD_jR2O*Vk1eC88$+005*K>Rtqm@w&1$D^paTE|aRUHhkpRFo=2h4( z0N^VO0PI@>0Mh9I0If$>6GRpOpug1sD?$S-4_~w#{c|DRfJ1*BviUI)Wr?;34sLSyBVc_D)Ea=qP$K9~A0 zkL`lX*wxCee~`=H-VxG*06=`TFxYi0F##YPo5Q;75iDpGE5cEsgB5^OA`er*CkR6^ zkx+thfUJBz00N(|4hmS%nH*+m=$_H8K6=lvqi6U{F)dXG{s zmQu$eZ-0e`PPz4?HhUlUzoF)|dA$dEaA@H10{!>q(2BjWS2jSw^kYo#P(pt)*>-`H zFuUIe(C;7I_iVy&$DZlFSw(-!NQFnc+5NpE`sJJq~H4> z#D|*dKa7dRf3wkp9gD|p zqgrEwz3V}X-X?Pq0pQ%$`l8p$T{p7nP22{J@AO9!81AR1Go3iq0Sn2AyA%^(CTM=c z`CHJzSxGF!pRZON;wrJo$7@v}ZBW$|BqCE|T1)f&L`1x0^x6Dp<8NInp?~FeRA1Sd z%6KJZ5&FJSaBG#Ql_>f`!yo~1qbGMCk6;qzBy!{=i#WXRrx$-R@x_Hq2+vfM&HtfE z4@bRv`QPUokAjb9o7>*O(Fl^JI+Ue3J56=bOjDatVN{SW51El+GZo~pI^5N)>|g_Y ze#58;AE37AF}(OV$tl56DK*&otc}Z4ZAQ?@vyt$aaH`QR3^m9WACsSms(S6*I;BlP z+@=s-OXMtJ!zDAc*P{C188dG4NRgm(292Atu6MQi^f6gcri?IqNVLuc2QBEUZbb>5 zZ?O^sRhn?&(1~Vriew%wdO>Hzf_j-6bc!^3ew`DYc>EDsrq)UV{xUHZD+U^(72I*KOtS4vbLJ#MBz<4r__bGSiS2YYk*n6Uj4yCT zmm{zI(r52nYxo8+aea7c$pKrqAut+XscR^WtuRs-$Zu!fW2q^%ff`f5%wniCvBFM^#@^y7C7bDRwhuj;U2~dHk&JHbF2hSCLP~3oL9yqIolcLczt6`B zi&4#}#?(&KG@!a8DSub(>9%n{)UVlVzFBi*y62DF-Ta~wKj{h)nCoVs4IR+3{aMcP z@A8S*Ku`CQFq^m3J{sP@gA46=#zZ`JZ@99BJn7aDq$}IhlcmllbRB$oFP6Y9#jB+6 zMAe*eP}`L;yYQ54gD1iypAt&15Ww4-B8JP@NAH zOE#+R50O-5ar6rr>#nSCYqc$fD(5b@zS-H<`wHFmB~7SsRjlA zRmu>7Xl19#LJ-L+7XedUplmS+@!*G7$CZQ+r-vDwoRr(m;n(+fZ`k+y5G?X<|FE{l zpf%&8hTRX)@*^d-G{m~KSH7Bu*7x$W&Ls02~nE;u?qK+IEPxjXu^|nl+_XDr8Q?%Nx zkPJIbF?Z>cuM8&IOEV(A$B2cDE5bAx1g=3+|^{4SQ?a89OeV*HgwOrsC za~ZyODVb`4k3NmQ9VFH%?wwamyM9qZTrcoQs;aT#$oqHywE536-K0#{0MhqV;B2WG z#}VjM_Q-p&hEdI@F*P((Y_RK#L-RqH7!`;bAE;o>3@k@iXpH(jN&M5lpL!4eq;tBd zH8;;R4^VE0EXfJZ+bPoIV#x z5kUe#0ggDE15?LBM{3iX>JEN|ZxZZQ$mLpg7YkTdS%O*i#zVlQx zGBFh5-61WH(y9M~;wohv3r@{flV>IkcZFX&?&ixYSaV>~WI~v#s6rktCJW-qEfV8A z#UQjq;3$TTV}?PIxSrDq1_8OL-`c6+Xo_t_>Zm z>$kYOJso2*&UK@$M$-<)mx$6|;

All identities: Toggles +the inclusion of all configured identities in the NetIdMgr identity lists. +If all identities is unchecked, only the default identity, pinned identities, +and identities with credentials are included in the NetIdMgr identity lists.
+
View columns: Only available in Advanced mode. @@ -70,7 +75,7 @@ display. where the credentials are grouped by the location where they are stored in. For Kerberos 5, the location is the name of the credentials cache in which the tickets are stored, and for AFS, - the locatino is always the cache manager. Individual credential providers choose the interpretation of the location property as the concept of location changes from type to type.
diff --git a/src/windows/identity/help/html/use_config.htm b/src/windows/identity/help/html/use_config.htm index 76b498ac1..02e22a641 100644 --- a/src/windows/identity/help/html/use_config.htm +++ b/src/windows/identity/help/html/use_config.htm @@ -62,7 +62,7 @@ than 1/4 of its original lifetime left) and so on.

-
Plugins: Enable/disable and check the status of +
Plug-ins: Enable/disable and check the status of registered plug-ins. Enabling or disabling a plug-in only takes effect after a restart of NetIDMgr.

diff --git a/src/windows/identity/help/html/use_icon.htm b/src/windows/identity/help/html/use_icon.htm index 85e05fdb3..bb8af5225 100644 --- a/src/windows/identity/help/html/use_icon.htm +++ b/src/windows/identity/help/html/use_icon.htm @@ -53,11 +53,12 @@ operations.

Obtaining new credentials
-
Destroying credentials
+
Renew credentials

Import credentials from the Microsoft Logon Session cache
-
Renew credentials
-
Change password
+
Destroying credentials
+
Setting the Default Identity
+
Change password

diff --git a/src/windows/identity/help/html/using.htm b/src/windows/identity/help/html/using.htm index c9808effa..7b5520147 100644 --- a/src/windows/identity/help/html/using.htm +++ b/src/windows/identity/help/html/using.htm @@ -39,14 +39,15 @@ Brief overviews of how to perform common tasks are linked below:

Obtaining new credentials
-
Destroying credentials
+
Renew credentials

Import credentials from the Microsoft Logon Session cache
-
Renew credentials
+
Destroying credentials

Change password
+
Setting the default identity

Customizing the advanced credentials view layout

Configuring Network Identity Manager
-
Using the Toobar
+
Using the Toolbar

diff --git a/src/windows/identity/help/html/welcome.htm b/src/windows/identity/help/html/welcome.htm index a7b1f53b1..a12c1d37d 100644 --- a/src/windows/identity/help/html/welcome.htm +++ b/src/windows/identity/help/html/welcome.htm @@ -21,7 +21,7 @@ secure access to network services. When NetIDMgr is used with Kerberos v5 network identity is a unique Kerberos principal name and the credentials are Kerberos v5 tickets. Kerberos v5 tickets can be used by NetIDMgr to obtain Andrew File System (AFS) tokens and X.509 public key certificates if the -appropriate plug-ins are available.
+appropriate plug-ins are installed.

When you log into Microsoft Windows with a domain account, your account name and the Windows Domain name when combined form a Kerberos principal name. As an example, WINDOWS\jaltman is actually a short form @@ -93,8 +93,8 @@ Windows. The KCA plug-in is distributed by
Getting started

-
NetIDMgr concepts
-
Using NetIDMgr
+
Network Identity Manager concepts
+
Using Network Identity Manager

How do I ...

All Menus

diff --git a/src/windows/identity/help/html/wnd_main.htm b/src/windows/identity/help/html/wnd_main.htm index dd9885446..85707cd6e 100644 --- a/src/windows/identity/help/html/wnd_main.htm +++ b/src/windows/identity/help/html/wnd_main.htm @@ -1,87 +1,114 @@ - - Network Identity Manager - Application Window - - - - - + +Network Identity Manager - Application Window + + + + + + +
Network Identity Manager - Application Window
- -
The application window of Network Identity Manager can be displayed in two modes: basic and advanced.
- -
The basic view provides status information of the currently available identities whereas the advanced -view provides more detailed information of all the active credentials.
- +
The application window of Network Identity Manager can be displayed in two modes: +basic and advanced.
+
The basic view provides status information of the currently available identities +whereas the advanced view provides more detailed information of all the active credentials.

- +
Figure 1. Network Identity Manager Basic View

-
- - -
Figure 2. Network Identity Manager Advanced View
+ +
Figure 2. Network Identity Manager Advanced View

-
-
Menu bar
-
Tool bar
-
Credentials list
- +
Menu bar
+
Tool bar
+
Credentials list

-
Identity views
- -
-The default credentials view organizes them grouped by identity name -and then by credential type. Each credential is then shown under each -group heading sorted by the credential name. The default headings for -the credential view provides you with a minimal amount of information -to reduce clutter. If you wish you can add columns to the display -using the Choose columns... action on the -View menu. -
- -
-The header backgrounds and the credential rows change color if the -credentials are about to expire or are expired. - -
- -
Headers mean that -credentials at that level will expire unless renewed. Credentials -will have a warning icon next to them.
- -The threshold for this can be set as the Warn -parameter in the Notifications configuration -panel.
- -
Headers mean that -credentials at that level will expire in a few minutes. Credentials -will have a critical icon next to them.
- -The threshold for this can be set as the Warn -again parameter in the Notifications -configuration panel.
- -
Headers mean that -the credentials at that level have expired. Credentials will have an -expired icon next to them.
- -The threshold for this is always zero. +
The advanced credentials view organizes them grouped by identity name and then +by credential type. Each credential is then shown under each group heading sorted +by the credential name. The default headings for the credential view provides you +with a minimal amount of information to reduce clutter. If you wish you can add +columns to the display using the Choose columns... action +on the View menu.
+
The header backgrounds and the credential rows change color if the credentials +are about to expire or are expired.
+
+
Headers mean that credentials +at that level will expire unless renewed. Credentials will have a warning icon +next to them.
+The threshold for this can be set as the Warn parameter +in the Notifications configuration panel.
+
Headers mean that credentials +at that level will expire in a few minutes. Credentials will have a critical +icon next to them.
+The threshold for this can be set as the Warn again +parameter in the Notifications configuration panel.
- -
-
+
Headers mean that the credentials +at that level have expired. Credentials will have an expired icon next to them.
+The threshold for this is always zero.
+
+
In its default configuration, the NetIdMgr advanced view displays +a list of network identity names (aka Kerberos principals, user@REALM). Each +entry appears with a + +or +button, a pushpin +or +button and an Identity icon +to its left.
+
Click on the + +button of an identity to expand the branch, displaying a + +button. Click on the +button to hide the branch.
+
Click on the pushpin +or +button to pin the identity to the display. A pinned identity will be +displayed in the identity list regardless of whether or not it has matching +credentials.
+
Click on the Identity icon +to view the identity's properties dialog.
+
To the right of each credential is a flag icon representing +one of the following states:
+
                +None      = credentials are valid
+
                + +           += credentials are valid and renewable
+
+           += credentials are valid and the initial expiration warning has been issued
+
+ +           += credentials are valid and the final expiration warning has been issued
+
+ +           += credentials are invalid or expired
+

+

+
- \ No newline at end of file + + -- 2.26.2

About Network Identity Manager

In the beginning

Design

Network Identity Manager - New Credentials

a Network Identity Manager - New Credentials

Network Identity Manager Concepts: Identity

Default Identity

Credentials view

Network Identity Manager - View Menu

Getting started

Network Identity Manager - Application Window

Identity views