"Christopher D. Clausen" <[EMAIL PROTECTED]> writes:
> Okay, sounds good to me.  Note that I am unaware of any packaged "get 
> tokens before running" mods for CGI apps.

Sorry for reviving a stale thread here.  I believe the UMBC version of
mod_waklog is worth looking at.  Specifically, the WaklogPrincipal
directive (only in their version) which can be set on a per-<Location>
basis:

  http://www.umbc.edu/oit/iss/syscore/wiki/Mod_waklog

Performance will not be outstanding, however -- you can't use threaded
versions of Apache, and every HTTP request will trigger a kinit+aklog.
But setting up a separate instance of Apache solely for stuff that
needs to be AFS-authenticated would probably be worth it.

Also, if you end up installing mod_waklog, I highly recommend UMich
filedrawers too.  It's really slick.

  - a


_______________________________________________
HCoop-SysAdmin mailing list
[email protected]
http://hcoop.net/cgi-bin/mailman/listinfo/hcoop-sysadmin

Reply via email to