[OpenAFS] client without a server

klaas hagemann klaas@northsailor.de
Wed, 2 Oct 2002 14:29:51 +0200


Hello (or Hallo ;-) ) Helmut,

you can start the afs-client without an afs-server as far as i can see it.
But feel free to correct my.
You just cannot use any functions of the afs-client.
The pam-afs Modul you are using uses these functions .

So you should change your /etc/pam.d/login like this:

login auth       requisite  pam_securetty.so
login auth       sufficient   pam_unix.so
login auth        required pam_afs.so debug try_first_pass ignore_root
login auth       optional   pam_group.so
login account    requisite  pam_time.so
login account    required   pam_unix.so
login password   required   pam_cracklib.so retry=3
login password   required   pam_unix.so shadow md5 use_authtok
login session    required   pam_unix.so

So the login-session will be terminatet, if the pam_unix is sufficient.
To make this usefull, users should have a different password in afs then on
the unix-box (otherwise it won't get to pam_afs.so).

Klaas

----- Original Message -----
From: <jarausch@igpm.rwth-aachen.de>
To: <openafs-info@openafs.org>
Sent: Wednesday, October 02, 2002 1:38 PM
Subject: [OpenAFS] client without a server


> Hi,
>
> I would like to have the possibility to run a client even if the
> afs server is not available.
> Currently I get (lots of) messages
> Lost contact of volume location server ...
>
> and even worse, I cannot login (as non-root)
>
> here is (the relevant part of) my file  /etc/pam.conf
>
> # The PAM configuration file for the `login' service
> #
> login auth       requisite  pam_securetty.so
> login auth       required   pam_unix.so
> login auth       sufficient pam_afs.so debug try_first_pass ignore_root
> login auth       optional   pam_group.so
> login account    requisite  pam_time.so
> login account    required   pam_unix.so
> login password   required   pam_cracklib.so retry=3
> login password   required   pam_unix.so shadow md5 use_authtok
> login session    required   pam_unix.so
>
> Any help is very much appreciated,
>
> Helmut Jarausch
>
> Lehrstuhl fuer Numerische Mathematik
> Institute of Technology, RWTH Aachen
> D 52056 Aachen, Germany
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info