[OpenAFS] AFS-Krb5 monster-patch / getting AFS token using kerberized apps

Frederico Muņoz fsmunoz@gesal.org
Fri, 17 Jan 2003 13:33:56 +0000


(sorry for the (no subject) message before, this is the same one but with a 
Subject) 

Hello, 

I have recently  - after some problems and a lot of reading - integrated AFS
with my Kerberos realm. I had initial problems because I was trying to use a
different cell name than the name of my Kerberos Realm but after setting it
to the same (and using des-cbc-crc, etc) it works very well and I'm
constantly amazed by the features and power of AFS. The Realm consists os
many different Unix servers (HP-UX, AIX, Solaris, GNU/Linux), with several
combinations (e.g. HP-UX 11.0 32bits and 64bits). I'm having problems with
some kernel modules on some archs but that's probably because it's better to
compile them from source. 

Anyway, the reason I'm writing is the "monster-patch" from the AFS-Krb6
migration kit. I need a way for users to log in in the servers and have an
immediate AFS token. PAM is not an option because I use kerberized
telnet/ftp, and PAM modules are not available for all the archs. So I've
been reading andI've found references to the krb5_run_aklog et al and I'm
confident that this is what I really need :). Problem is, I'm running MIT
Kerberos 1.2.6, the patch is for 1.0.6. Basically I would like to know if
someone has a version of the patch that applies in this KErberos version.
I'm interested in the AFS/Krb5 additions that the patch gives. 

Best Regards, 

fsmunoz