[OpenAFS] Making screensaver updating token on solaris

Charles Clancy security@xauth.net
Tue, 26 Feb 2002 11:50:12 -0600 (CST)


> > My only other suggestion is to use a different screen locker.
> > /usr/openwin/bin/xlock is out, because it doesn't support PAM.
> > Xscreensaver is good.  Of course, you'd have to instruct your users to
> > type "xscreensaver-command -lock" rather than clicking the lock icon on
> > the CDE front panel.
>
> I've used xlockmore for a long time:
>
> http://www.tux.org/~bagleyd/xlockmore.html
>
> I was not able to get PAM support to work properly with version 5.00, but
> I had very good luck with both krb5 support (MIT and Heimdal) and with AFS
> support.

The point of the original post was to be able to refresh tokens when
unlocking the screensaver.  How is that done in a program that natively
supports kerberos and AFS?  Can you tell it whether or not it should
"-setpag" when it grabs a new AFS token?

--
t. charles clancy <> tclancy@uiuc.edu <> www.uiuc.edu/~tclancy