I'm curious to which techniques you were referring. The only I've been able to find on the port-darwin list concerts a program that someone wrote to take the ticket and essentially run aklog (it's a Kerberos plugin).
Were there other techniques at which I should be looking as well? Thanks! On 2002.10.01 15:37 Alexei Kosut wrote: > On Tue, Oct 01, 2002 at 02:33:33PM -0400, David Botsch wrote: > > Now, how does this help me get an afs token upon login (needed since > > > home directories are in afs-space)? > > Configuring loginwindow to use the krb5auth plugin means that the > Kerberos credentials cache gets populated on login. If you then use > one of the techniques that have been disscussed recently on the > [EMAIL PROTECTED] mailing list to get an AFS token when Kerberos > credentials are obtained, then you end up with an AFS token before the > login session is started, so AFS home directories should work. > > P.S. With Mac OS X 10.2.1, you can use "krb5auth:authnoverify" instead > of "krb5auth:authenticate" in /etc/authorization to enable Kerberos > authentication without needing to have a keytab installed. > > -- > Alexei Kosut <[EMAIL PROTECTED]> > <http://rescomp.stanford.edu/~akosut/> > -- ******************************** David William Botsch Consultant/Advisor II CCMR Computing Facility [EMAIL PROTECTED] ******************************** _______________________________________________ OpenAFS-devel mailing list [EMAIL PROTECTED] https://lists.openafs.org/mailman/listinfo/openafs-devel
