On 05/31/00 09:51:41 -0500 Troy Dawson <[EMAIL PROTECTED]> wrote:
+-----
| I'm been able to go through all of our PAM files (RedHat 6.1) and get
| authentication for AFS and get our AFS tokens through the KDE and GNOME
| graphical login windows, but ... well maybe I'm just braindead this
| morning, but what is a PAG?
+--->8
Process Authentication Group; it tells the Cache Manager which set of
tokens to use to authenticate AFS access for that process. It's created
with a VIOCSETPAG call and inherited by subprocesses.
And therein lies the problem. You will find that in [xk]dm, the server
process ends up in the same PAG as the X session... meaning that if you run
XDMCP anyone connecting from another machine will land in your PAG, at
least temporarily, and you may find yourself running with their token for a
while (and then with no token) when they log in.
--
brandon s. allbery [os/2][linux][solaris][japh] [EMAIL PROTECTED]
system administrator [WAY too many hats] [EMAIL PROTECTED]
electrical & computer engineering KF8NH
carnegie mellon university ["better check the oblivious first" -ke6sls]
