[krbdev.mit.edu #5917] kerberos bug while using GetWindowsDirectory API on Windows System

[Jeffrey Altman via RT]

sharma via RT wrote:
> Hi
> 
>  
> 
> I came across a problem in latest 1.6.3 and 1.5.4 Kerberos source code where
> GetWindowsDirectory() returns private Windows System directory path for
> every logon user when windows terminal services are installed on a system.

The problem that has been identified is correct.  The current policy of 
storing configuration data in the Windows directory or the Program Files
directory no longer works on Vista and 2008 Server due to directory
virtualization.

The preferred location to store configuration data that can be accessed
by all users and by both 32-bit and 64-bit instances of the 
libraries/applications is the \ProgramData\MIT\Kerberos directory
(which on XP/2003 is \Documents and Settings\All Users\Application 
Data\MIT\Kerberos\).