Is there any reliable way to determine information about who a token
belongs to.

I have a token structure that was retrieved using ktc_GetToken, which may
or may not contain the uid in the user name (ie. the output of 'tokens' may
show afs@cell, or AFS ID XXXX).

Is there any reliable way to determine who I am authenticated as from the
token?

In case you're wondering, the reason for this is, I am exchanging the token
with another host (i.e. remsh style passing using ktc_GetToken and
ktc_SetToken). The remote host needs to verify who the user is, but all
that having the token does so far is let it know that the user is
authenticated to AFS, it doesn't help me to know WHO they are authenticated
as.

We are using plain vanilla AFS, none of the kerberos srvtab stuff.

The application that we are trying to develop is a authenticated popclient
that can fetch mail from a POP server without a password. The way it will
work is, it will pass the token to the remote server, and the remote server
will verify that the token is valid, and (if it is possible) determine the
userid from the token and then retrieve that userid's mail. (Essentially
treating the token as the password.)

Any information about this would be appreciated. Including better ways to
do what I am trying to do.

-- Nathan

------------------------------------------------------------
Nathan Neulinger                  Univ. of Missouri - Rolla
EMail: [EMAIL PROTECTED]                  Computing Services
WWW: http://www.umr.edu/~nneul      SysAdmin: rollanet.org


Reply via email to