[OpenAFS] aklog oddness?

Ken Hornstein kenh@cmf.nrl.navy.mil
Tue, 20 Dec 2005 15:29:47 -0500


>I've installed OpenAFS 1.4.0 on two RHEL AS 3 machines for testing. They
>both use Kerberos 5, aklog, and all that good stuff. They seem to be
>working perfectly, except if I do a second `aklog` after logging in and
>getting my ticket from pam_krb5afs, it breaks:

Technically, isn't this the first aklog?  I was under the impression that
pam_krb5afs doesn't use the Brashear-reveled "forking aklog" technique
and does everything internally.  I could be wrong, though.

The aklog that is in the binary package for 1.4.0 isn't the one that is
shipped with OpenAFS (don't blame me for that - talk to the package
maintainers).  So it's conceivable that pam_krb5afs is doing something
different than aklog.  One interesting test would be to run kinit/aklog
after you login and see what happens.

--Ken