aklog has a -d option. It is very helpful.
FB wrote:
Hi,
On Thu, Mar 22, 2007 at 02:04:23PM +0100, Sergio Gelato wrote:
* FB [2007-03-22 12:13:51 +0100]:
Yes - but... 'aklog -setpag' actually creates a PAG. It just doesn't get a
token.
This set of commands works and creates a PAG with a token in it:
$ kinit
$ aklog -setpag
$ aklog
Are you sure the PAG isn't a preexisting one?
Yes, I'm 100% sure.
[snip]
Here's a demonstration session:
$ unset KRB5CCNAME
$ ssh localhost
$ echo $$;id
31847
uid=10266(burk2) gid=15(kmem) Gruppen=15(kmem),24(cdrom),[...]
$ tokens
Tokens held by the Cache Manager:
--End of list--
$ kinit
Password for [EMAIL PROTECTED]:
$ echo $$;id
Add a klist here.
31847
uid=10266(burk2) gid=15(kmem) Gruppen=15(kmem),24(cdrom),[...]
$ aklog -setpag
Add a klist her to see if it got a ticket for afs.
Where is the echo:id that produced the next line?
31847
uid=10266(burk2) gid=15(kmem) Gruppen=34379,36420,15(kmem),24(cdrom),[...]
$ tokens
Tokens held by the Cache Manager:
--End of list--
Why did the PAG number change between the above and below.
$ echo $$;id
31946
uid=10266(burk2) gid=15(kmem) Gruppen=34379,36421,15(kmem),24(cdrom),[...]
Now let's get back grom the "sub-PAG":
$ exit
$ echo $$
31847
$ aklog
$ tokens
Tokens held by the Cache Manager:
User's (AFS ID 10266) tokens for [EMAIL PROTECTED] [Expires Mar 23 16:34]
--End of list--
[...] is a replacement for lots of application specific groups with gid < 1002
Regards,
Frank
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
--
Douglas E. Engert <[EMAIL PROTECTED]>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
