[OpenAFS] openafs with apache and mod_pam_auth

Sam Hartman hartmans@mit.edu
07 Jun 2001 16:23:56 -0400


>>>>> "Jason" == Jason Edgecombe <jedgecombe@carolina.rr.com> writes:

    Jason> hi all,
    Jason>   I just had an interesting thought. Can apache be given the proper afs
    Jason> tokens through mod_pam_auth to work as an authenticated afs user?

Yes.  You want an AFS PAM module that runs aklog and sets up a PAG.
You want to make sure that any ticket caches will be cleaned up.  You
should be aware that this is very insecure as it gives your web server
access to user passwords.