On Sun, 2008-12-07 at 00:27 +0100, Måns Nilsson wrote:
> --On lördag, lördag 6 dec 2008 19.44.06 +0100 Jesus arteche
> <[email protected]> wrote:
> 
> > hey,
> > 
> > I'd ike to know if there is  a possibility of access to my openAFS cell
> > via web. and if its possible where I can find the info about how to do.
> 
> Start apache with suitable tickets and tokens. An often used method is to
> create a principal, extract it to a file and then: 
> 
> #!/bin/ksh
> #
> #       Startup-script for apache-server with ticketfile.
> #       $Id: apache-stacken.sh,v 1.3 2005/07/21 17:19:42 thn Exp $
> #
> ARGV="$@"
> REALSCRIPT="/usr/local/apache2/bin/apachectl"
> 
> case $ARGV in
> start)
>     /usr/heimdal/bin/pagsh $0 second-level
>     ;;
> second-level)
>     /usr/heimdal/bin/kauth -l 8d -t /my/principal/file websrvapache
>     echo "Starting apache with kerberos-tickets:"
>     /usr/heimdal/bin/klist -T
>     $REALSCRIPT start
>     ;;

Unless I am missing something, won't this require restarting Apache
every 8 days.  A daemon like k5start usually needs to be running to
continually keep the ticket up-to-date.

-- 
Loren M. Lang
[email protected]
http://www.north-winds.org/


Public Key: ftp://ftp.north-winds.org/pub/lorenl_pubkey.asc
Fingerprint: 10A0 7AE2 DAF5 4780 888A  3FA4 DCEE BB39 7654 DE5B

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to