[OpenAFS] GSSKLOG works with native W2K via SSPI

Douglas E. Engert deengert@anl.gov
Fri, 13 Jun 2003 16:02:01 -0500


A new version of the gssklog program is available. It can now user either 
GSSAPI or the W2K built-in Kerberos via SSPI to obtain an AFS token. 

In addition to running on UNIX, when gssklog is run on a W2K system in a AD
domain, it will attempt to obtain credentials using GSSAPI, (via a gssapi32.dll) 
or by the Microsoft SSPI. It will try both, and the -ms option can be used to 
specify which is tried first. 

The intent was to allow the gssklog to run on a Windows system which has no 
additional Kerberos code installed, using only the OpenAFS and Microsoft provided
code.   

It is now much easier to build, on Windows as it does not require a Kerberos
build environment, but does require an OpenAFS set of header files and libraries. 

This client can run with previous version of the server, the wire protocol has 
not changed. 

It can be found at:

ftp://achilles.ctd.anl.gov/pub/DEE/README.GSSKLOG
ftp://achilles.ctd.anl.gov/pub/DEE/gssklog-0.8.tar

This is still beta, and has not been extensively tested.  If you find this 
interesting, drop me a note. 

-- 

 Douglas E. Engert  <DEEngert@anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444