[OpenAFS-devel] pagless authentication

Pete Zaitcev zaitcev@redhat.com
Mon, 29 Sep 2003 02:29:13 -0400


At one point, Derrik wrote:

> Currently it's possible to set a token when you have no pag, and these
> become associated with the uid that set them. (The pag number is not the uid;
> Instead any process without a pag but with a uid that has tokens associated
> with it gets those tokens.) As long as the above don't bind tightly to a pag,
> sure. 

I am curious about three things.

a. Is there a command line utility to do it, and if yes, which?
   klog does not appear to have a key (-setpag does something else, right?)

b. How long is the lifetime of these tokens, and where are they kept?
   If all user's processes exit, do they stay behind?

c. Is it a property of OpenAFS or Transarc AFS?

-- Pete