[OpenAFS-announce] pam-afs-session 1.0 released

Russ Allbery openafs-info@openafs.org
Wed, 06 Dec 2006 17:09:02 -0800

I'm pleased to announce release 1.0 of a new AFS session PAM module for
use in conjunction with a Kerberos v5-based aklog.

pam-afs-session is a PAM module intended for use with a Kerberos v5 PAM
module to obtain an AFS PAG and AFS tokens on login.  It puts every new
session in a PAG regardless of whether it was authenticated with
Kerberos and runs a configurable external program to obtain tokens.  It
supports using Heimdal's libkafs for the AFS interface and falls back to
an internal Linux-only implementation if libkafs isn't available.

Changes from previous release (0.3):

    Add --with-afs-headers to configure so that the user doesn't have to
    know the right syntax for setting CPPFLAGS.

    When using gcc, link with -fPIC as well as compiling with it per the
    gcc documentation.

    Add additional configuration information for Solaris.

    Link explicitly against the Kerberos libraries by default when linking
    with libkafs, only relying on transitive shared library dependencies
    when --enable-reduced-depends is passed to configure.  This should not
    be necessary on any of the currently supported platforms but may make
    porting easier to systems with deficient shared library support.

    Support building on Mac OS X.  The resulting module isn't tested and
    may not work.  Thanks, Sebastian Hagedorn.

You can download it from:


Debian packages will be uploaded to Debian unstable after the etch

Please let me know of any problems or feature requests not already listed
in the TODO file.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>