> From: John O Neall <[EMAIL PROTECTED]>
> Subject: Re: Security
>
> On Fri, 21 Apr 1995, Chris Cowan wrote:
> >
> > There are several tools, CMU's adm or IBM Research's Sysctl which can delegat
> e
> > authorities with more granularity, than stock AFS.
>
> Where can one get ADM?
>
> I recently asked IBM Yorktown for systcl. The request got shuttled off to
> someone else and forgotten. Seems like since sysctl has become a product
> (for the SP2), it's no longer available in the free source version. Or
> for non-IBM machines. It's for this reason I would like to see Transarc
> distribute sysctl along with AFS. After all, they do have connections in
> IBM.
There is also a tool I wrote called krbperl which is a simple Kerberos
extension for perl4. It includes (as a sample) a program which will
run arbitrary programs after checking the credentials of the caller,
and verifying that they are allowed to run that program. This is
useful for running AFS commands, as well as other mundane tasks.
A non-exhaustive set of example AFS commands are included, and more
are perfectly trivial to add, along with whatever logging facilities
you'd find useful.
Send email if interested, to [EMAIL PROTECTED]
--
John Redford (AKA GArrow) | 3,600 hours of tape.
[EMAIL PROTECTED] | 5 cans of Scotchguard.
