[OpenAFS] Re: CVS, GSSAPI, and AFS tokens

Jeff Blaine jblaine@kickflop.net
Wed, 14 Nov 2007 10:53:39 -0500


Feeding results back for others -- the following appears to
work fine so far.  I cleared all creds on the server for
user jblaine (krb5 and AFS tokens) and was able to checkout
from AFS ACL-protected space lacking system:anyuser privs.

Client:

     CVS_RSH=/usr/bin/ssh
     CVSROOT=:ext:jblaine@whatever.com:/afs/my/cvsroot

Server:

     sshd configured for PAM auth +
     pam_krb5.so (Russ Alberry's) +
     pam_afs_session.so

I've yet to try to figure it all out with ticket forwarding.

Jeff Blaine wrote:
> How are people handling krb5 auth with CVS and also getting
> tokens for gserver connections (GSSAPI/krb5)?
>