[OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread John Tang Boyland
Does anyone know of a sudo like command for AFS admin commands? admindo vos release pkg.foo It would be nice, but not essential to have the token stick around for 5 minutes in case you need to do another admindo soon afterwards. Regards, John

Re: [OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread Anders Magnusson
John Tang Boyland wrote: Does anyone know of a sudo like command for AFS admin commands? admindo vos release pkg.foo It would be nice, but not essential to have the token stick around for 5 minutes in case you need to do another admindo soon afterwards. Make a simple script

Re: [OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread John Tang Boyland
Anders Magnusson ra...@ltu.se wrote: ] John Tang Boyland wrote: ] Does anyone know of a sudo like command for AFS admin commands? ] admindo vos release pkg.foo ] It would be nice, but not essential to have the token stick around ] for 5 minutes in case you need to do another admindo soon

Re: [OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread Dirk Heinrichs
Am Freitag 17 Dezember 2010, um 15:29:41 schrieb John Tang Boyland: Does anyone know of a sudo like command for AFS admin commands? Errh, what about sudo? You could create a special kerberos principal with a random key (scripts), which is stored in a keytab (/etc/scripts.keytab). Also make it

Re: [OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread Chris (Ducky) Chapin
I wrote an afs sudo kind of thing around 2003 or so mainly intended to replace the adm stuff that ceased working after a server upgrade. It mostly handles vos releases for end-users but definitely not limited to that. Aside from sudo in the name and the fact that it handles elevated

Re: [OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread Jim Rowan
On Dec 17, 2010, at 2:24 PM, Chris (Ducky) Chapin wrote: Yeah, the auth is definitely a kluge and can't do anything kas releated, but it works for the ~500 requests/day it gets. Not sure how ready the code is for public consumption, though. ;) Several hundred of us think that it works

Re: [OpenAFS] AFS version of sudo for admin ?

2010-12-17 Thread Derrick Brashear
On Fri, Dec 17, 2010 at 5:24 PM, Chris (Ducky) Chapin ccha...@qualcomm.com wrote: I wrote an afs sudo kind of thing around 2003 or so mainly intended to replace the adm stuff that ceased working after a server upgrade. It mostly handles  vos releases for end-users but definitely not limited to