[OpenAFS-announce] pam-afs-session 1.3 released

[Russ Allbery]

I'm pleased to announce release 1.3 of pam-afs-session.

pam-afs-session is a PAM module intended for use with a Kerberos v5 PAM
module to obtain an AFS PAG and AFS tokens on login.  It puts every new
session in a PAG regardless of whether it was authenticated with Kerberos
and either uses Heimdal's libkafs or runs a configurable external program
to obtain tokens.  It supports using Heimdal's libkafs for the AFS
interface and falls back to an internal implementation if libkafs isn't
available.

Changes from previous release:

    Add a notokens configuration option which, when set, tells the module
    to only create a PAG and not to try to obtain tokens.  Based on a
    patch from Jason McCormick.

    When forking an external aklog, also close standard input and reopen
    it to /dev/null.  Normal aklog programs won't try to read from
    standard input, but don't connect their standard input to any stray
    file descriptor inherited by the process just in case.

    Make --with-kerberos and --without-libkafs work properly together.

    Improve diagnostics around token acquisition.  Thanks, Jeff Blaine.

You can download it from:

    <http://www.eyrie.org/~eagle/software/pam-afs-session/>

Debian packages have been uploaded to Debian unstable.

Please let me know of any problems or feature requests not already listed
in the TODO file.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>