I have now managed to get the adm utility (apparently) working
in my European environment!  I got the free libdes source from
nic.funet.fi (in /pub/unix/security/crypt/libdes/libdes.tar.92-10-13.Z)
as suggested by Thomas Brandl.  This could not replace the Transarc
libdes.a, but can be linked in after it.  At this point the program
linked but failed with the message

     'Security level negotiation failed (rxk 19270402)'

This turns out to be the result of trying to start a connection with
a serviceDesc.level of rxkad_crypt; by changing this to rxkad_clear
in the four places where it occurs (once each in the files
admclt_main.c, admext_adm.c, admext_kas.c, admsrv_main.c), the
program appears to work.

I am now trying to program the utility to do something practical.
Unfortunately the documentation does not tell how many arguments
each of the functions requires, nor what those arguments are.
I have been studying the source in the admext_*.c and admmod_*.c files.
Some interesting (undocumented) extensions that have been implemented
are the procedure '(string-re=? "string" "regular_expression")',
which is particularly useful for me, and the bitwise operators
'(& ... )', '(^ ... )', and '(| ... )'.

Among the odd surprises are that for some (protected) directories in
/afs, the commands like unix-directory, unix-chown, and unix-chmod
do not work unless you first give the command '(cachemgr-set-auth ())'.
Several commands seem to require several empty lists as parameters:
'(vol-list-partitions () () () "hostname")' for example.  I cannot
get the command unix-exec to work, though this would obviously be
fairly useful, and among the commands i do not see how to use are
kas-set-password, kas-set-fields, and whatever you have to do to
get and/or set quotas on volumes.  On the other hand, unix-reboot
works only too well.

If any ADM experts would like to contribute some explanations, I am
sure we would all be grateful.

     -- Owen
     [EMAIL PROTECTED]


Reply via email to