[OpenAFS-announce] pam-afs-session 2.3 released

Russ Allbery openafs-info@openafs.org
Tue, 07 Jun 2011 14:36:09 -0700

I'm pleased to announce release 2.3 of pam-afs-session.

pam-afs-session is a PAM module intended for use with a Kerberos v5 PAM
module to obtain an AFS PAG and AFS tokens on login.  It puts every new
session in a PAG regardless of whether it was authenticated with Kerberos
and either uses Heimdal's libkafs or runs a configurable external program
to obtain tokens.  It supports using Heimdal's libkafs or OpenAFS's
libkopenafs for the AFS interface and falls back to an internal
implementation if libkafs isn't available.

Changes from previous release:

    If there is no KRB5CCNAME environment variable set in the PAM
    environment but there is one set in the regular environment, still run
    aklog and use the KRB5CCNAME from the general environment.  This
    provides correct behavior in cases such as password-less sudo with the
    KRB5CCNAME environment variable preserved.

    Update to rra-c-util 3.6:

    * Fix compilation error with --without-krb5.
    * Update flags for make warnings to GCC 4.6.1.

    Update to C TAP Harness 1.7:

    * Add a more complete usage message and a -h command-line flag.

You can download it from:


This package is maintained using Git; see the instructions on the above
page to access the Git repository.

Debian packages have been uploaded to Debian unstable.

Please let me know of any problems or feature requests not already listed
in the TODO file.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>