[OpenAFS-devel] Re: [PATCH] in-core AFS multiplexor and PAG support

Neulinger, Nathan nneul@umr.edu
Tue, 13 May 2003 14:00:14 -0500


> > >  (2) gettok(const char *fs, const char *key, size_t size,=20
> void *buffer)
> > >=20
> > >      Get a copy of an authentication token.
> >=20
> > Not sure what the use of this is for userspace. I can see how your
> > kernel module would use it.
>=20
> OpenAFS has it, but I'm not sure what uses it.

Any afs user space tool that needs to talk to file servers - such as all
the administration utilities - vos, bos, pts, etc. Eventually they could
use kerberos cred caches directly, but not until they are converted to
kerberos. Right now, they fetch the current auth data from the kernel
and use it to authenticate to whatever non-kernel service they are
talking to.

-- Nathan