[OpenAFS-announce] pam-afs-session 1.5 released

Russ Allbery openafs-info@openafs.org
Sun, 30 Sep 2007 01:24:20 -0700

I'm pleased to announce release 1.5 of pam-afs-session.

pam-afs-session is a PAM module intended for use with a Kerberos v5 PAM
module to obtain an AFS PAG and AFS tokens on login.  It puts every new
session in a PAG regardless of whether it was authenticated with Kerberos
and either uses Heimdal's libkafs or runs a configurable external program
to obtain tokens.  It supports using Heimdal's libkafs for the AFS
interface and falls back to an internal implementation if libkafs isn't

Changes from previous release:

    Free the results of pam_getenvlist and the command-line argument for
    aklog properly.

    Don't de-reference a NULL pointer if memory allocation fails while
    parsing PAM options.  Thanks, Jason D. McCormick.

    Change lib to lib64 on x86_64 Linux to allow for the magical $ISA
    parameter in Red Hat's PAM configuration.  Hopefully this won't cause
    problems elsewhere.

    Fix linker determination when using gcc on HP-UX.

    Add additional debugging output when acquiring or destroying tokens.

You can download it from:


Debian packages have been uploaded to Debian unstable.

Please let me know of any problems or feature requests not already listed
in the TODO file.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>