[OpenAFS] ssh and afs

Mitch Collinsworth mitch@ccmr.cornell.edu
Fri, 3 May 2002 18:03:17 -0400 (EDT)


To clarify, the question Daniel was asking is how to do this when
you're still running kaserver.

-Mitch


On 3 May 2002, Derek Atkins wrote:

> Use krb5 and v5-TGT passing.  Then use pam-openafs-session to convert
> your v5 TGT into an AFS tokens (via aklog).
>
> -derek
>
> Daniel Blakeley <daniel@ccmr.cornell.edu> writes:
>
> > Hi,
> >
> > We're having some problems integrating openssh with AFS.  We want
> > users to login to one machine and be able to login to other machines
> > in the cell without typing a password and they should have an AFS
> > token.  The lastest version of openssh doesn't seem to pass tokens
> > like the version 1.x did.  We are running the kaserver but Krb5 is not
> > far in the future.  What is the proper way to have a single sign on
> > with a recent version of openssh?
> >
> > Thanks,
> > - Daniel