Re: [Openvpn-devel] [PATCHv2] t_client.sh: Add support for Kerberos/ksu

2016-09-17 Thread Gert Doering
Hi, On Sat, Sep 17, 2016 at 01:19:33PM +0300, David Sommerseth wrote: > +klist -l &> /dev/null NAK :) (bashism, on ksh it will just put "klist -l" into the background) gert -- USENET is *not* the non-clickable part of WWW! //ww

[Openvpn-devel] [PATCHv2] t_client.sh: Add support for Kerberos/ksu

2016-09-17 Thread David Sommerseth
If the t_client.rc have PREFER_KSU=1 configured, t_client.sh will check if you have a valid Kerberos ticket and if so it will do all execution via ksu instead of sudo. If PREFER_KSU is not set or a Kerberos ticket is not found, it will fallback to the configured RUN_SUDO approach. When using ksu