In article <[EMAIL PROTECTED]>,
Joel Patrick Lord <[EMAIL PROTECTED]> wrote:
> I'm trying to get a kerberized XDM to work correctly under AIX 3.2.5
>The version we've got works perfectly under SunOS 4.1.3, but under AIX
>will only be able to authenticate approximately 16 users (total, not
>simultaneously) before deciding to go to lunch. The actual symptoms are
>that suddenly ka_UserAuthenticateGeneral doesn't get a PAG when
>authenticating, even though one is requested. Putting a setpag() just
>before the ka_UserAuth... doesn't make *ANY* difference. Without the
>PAG, the user's tokens also take a vacation. It's possible that the
>PAG is actually being created, the tokens are in it, and then the
>whole mess vanishes.
> Anyone have any experience with authenticating under AIX? The login
>source code seems to be nearly identical to our XDM code, so it's been
>no help...
While I have not personally investigated this problem, a friend of mine
did in his former position. He actually isolated the problem to be
interactions between AIX and AFS (XDM was not needed to demonstrate the
failure.) According to my friend, it has to do with the extra bits that
AIX provides as part of the environment. What you really need to do, is
to compare how "setpag()" works in the AFS kernel code with how a process
is forked in the AIX source for init.
He was able to duplicate the problem with a test program, and when he
added support for passing AIX process limits, the problem did not re-appear.
Unfortunatly, he got pulled off that project to do something else before
he could install the changes in XDM.
He also suggests that you look at the X11R6 xdm, as it is nicer in some
ways.
--
Jon Finke [EMAIL PROTECTED]
Senior Network Systems Engineer [EMAIL PROTECTED]
Information Technology Services 518 276 8185 (voice)
Rensselaer Polytechnic Institute 518 276 2809 (fax)
