[OpenAFS] GSSKLOG works with native W2K via SSPI
Douglas E. Engert
deengert@anl.gov
Fri, 13 Jun 2003 16:02:01 -0500
A new version of the gssklog program is available. It can now user either
GSSAPI or the W2K built-in Kerberos via SSPI to obtain an AFS token.
In addition to running on UNIX, when gssklog is run on a W2K system in a AD
domain, it will attempt to obtain credentials using GSSAPI, (via a gssapi32.dll)
or by the Microsoft SSPI. It will try both, and the -ms option can be used to
specify which is tried first.
The intent was to allow the gssklog to run on a Windows system which has no
additional Kerberos code installed, using only the OpenAFS and Microsoft provided
code.
It is now much easier to build, on Windows as it does not require a Kerberos
build environment, but does require an OpenAFS set of header files and libraries.
This client can run with previous version of the server, the wire protocol has
not changed.
It can be found at:
ftp://achilles.ctd.anl.gov/pub/DEE/README.GSSKLOG
ftp://achilles.ctd.anl.gov/pub/DEE/gssklog-0.8.tar
This is still beta, and has not been extensively tested. If you find this
interesting, drop me a note.
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444