[OpenAFS] Solaris and AFS

[John Rudd]

I just wanted to send back a "thank you" note.  Derrick Brashier 
explained the whole thing about pag's to me in email (off list) 
yesterday. (our AFS cell was set up on our SunOS systems by one of my 
predecessors, and I tend to work more with our email and kerberos 
systems than our AFS systems; but I've been trying to resolve a problem 
that we've been having wrt to different behaviors on our SunOS and 
Solaris web servers).

Though, the information about pam_afs is good to know.  Is there a 
version of pam_afs that works more directly with kerberos (like aklog, 
which is what we use)?  We don't run fake-ka/kaforwarder, so I'm not 
sure pam_afs would work here.  Though, maybe I should look into trying 
to get fake-ka and kaforwarder to work here.

I guess what I mean by that is "if I use pam_krb5 and and pam_afs, 
without fake-ka and kaforwarder, will pam_afs take the kerberos ticket 
created by pam_krb5 and 'do the right thing'?"


Also, I notice there is both a pagsh and a pagsh.krb  ... what's 
different about pagsh.krb, exactly? (and if you'd like to just point me 
at a URL instead of typing in an explanation, that's fine ... if I'm 
told where the FM is, I don't mind being told to RTFM)


John