On Wed, 13 Apr 2005, Douglas E. Engert wrote:
pam_afs2.c will then call the gafstoken routine that will get a PAG using syscalls, then fork/exec your favorite aklog, ak5log, gssklog, or afslog to actually get the token.
Ask Ken Hornstein about my mockery of forking aklog. Anyway,
Basically, you're doing the same thing as pam_openafs_session.so in debian.
Could be, but its for more then debian. I would like to see OpenAFS provide the PAM routine that would run in any system.
We don't provide aklog, afslog, ak5log, gssklog or fries with that yet, so basically we'd be providing "hey buddy, wanna fork /bin/true?"
pam_afs2 in not doing authentication, it is there to get a PAG and token using the credentials saved by a previous pam or by the application like OpenSSH.
I wrote that in like 1997, it was called pam_afs, used the kerberos tickets gotten by pam_krb4, and linked libraries instead of forking;-)
_______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
