[OpenAFS] ssh and afs
Derek Atkins
warlord@MIT.EDU
03 May 2002 18:11:12 -0400
Um, I think the answer is: you don't.
-derek
Mitch Collinsworth <mitch@ccmr.cornell.edu> writes:
> To clarify, the question Daniel was asking is how to do this when
> you're still running kaserver.
>
> -Mitch
>
>
> On 3 May 2002, Derek Atkins wrote:
>
> > Use krb5 and v5-TGT passing. Then use pam-openafs-session to convert
> > your v5 TGT into an AFS tokens (via aklog).
> >
> > -derek
> >
> > Daniel Blakeley <daniel@ccmr.cornell.edu> writes:
> >
> > > Hi,
> > >
> > > We're having some problems integrating openssh with AFS. We want
> > > users to login to one machine and be able to login to other machines
> > > in the cell without typing a password and they should have an AFS
> > > token. The lastest version of openssh doesn't seem to pass tokens
> > > like the version 1.x did. We are running the kaserver but Krb5 is not
> > > far in the future. What is the proper way to have a single sign on
> > > with a recent version of openssh?
> > >
> > > Thanks,
> > > - Daniel
>
--
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH
warlord@MIT.EDU PGP key available