On Fri, Dec 08, 2006 at 01:15:10PM -0600, Douglas E. Engert wrote: > > > Kirk Patton wrote: > > >Hello, > > > >I am working on a small C program that needs to klog on behalf of a user. > >We are running Sun Grid Engine and AFS. In order for a SGE job to access > >AFS space, SGE needs to be able to switch to the users ID and authenticate > >to AFS. > > You did not say what the trust relationships are between the user, the SGE > and AFS. AFS requires some user credential to get obtain an AFS token.
I am caching the users password to an encrypted file that only my C program will be able to decrypt. SGE would call my program which would decrypt the file and then authenticate using the users password. If that sounds like a strange way to accomplish the task, I am open to other methods. Thanks, Kirk > > This could be a delegated Krb5 ticket, a grid proxy cert or even a password. > What user credentials are available to the SGE to use to get the token? > (I assume you are trying to get AFS tokens for the user, and not the SGE > itself.) > > If the SGE is completely trusted by AFS to have authenticated the user, > you could even get an AFS token without a delegated credential. > > > > >I was wondering if there are any tutorials/howto's or references that > >could be of help. > > > >Thanks, > >Kirk > > > > > > -- > > Douglas E. Engert <[EMAIL PROTECTED]> > Argonne National Laboratory > 9700 South Cass Avenue > Argonne, Illinois 60439 > (630) 252-5444 -- Kirk Patton Unix Administrator Transmeta Inc. Tel. 408 919-3055 _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
