[OpenAFS] ssh and afs

Derek Atkins warlord@MIT.EDU
03 May 2002 18:11:12 -0400


Um, I think the answer is: you don't.

-derek

Mitch Collinsworth <mitch@ccmr.cornell.edu> writes:

> To clarify, the question Daniel was asking is how to do this when
> you're still running kaserver.
> 
> -Mitch
> 
> 
> On 3 May 2002, Derek Atkins wrote:
> 
> > Use krb5 and v5-TGT passing.  Then use pam-openafs-session to convert
> > your v5 TGT into an AFS tokens (via aklog).
> >
> > -derek
> >
> > Daniel Blakeley <daniel@ccmr.cornell.edu> writes:
> >
> > > Hi,
> > >
> > > We're having some problems integrating openssh with AFS.  We want
> > > users to login to one machine and be able to login to other machines
> > > in the cell without typing a password and they should have an AFS
> > > token.  The lastest version of openssh doesn't seem to pass tokens
> > > like the version 1.x did.  We are running the kaserver but Krb5 is not
> > > far in the future.  What is the proper way to have a single sign on
> > > with a recent version of openssh?
> > >
> > > Thanks,
> > > - Daniel
> 

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available