[OpenAFS] PAG issues with ssh

slushpupie@gmail.com slushpupie@gmail.com
Wed, 21 Sep 2005 14:24:31 -0500


On 9/21/05, Jim Rees <rees@umich.edu> wrote:
>   It seems the most
>   universal and safe way to deal with it would be to have some utility
>   to drop the PAG, if that is at all possible.
>
> Why not acquire a new pag with no tokens when you start a service?  That'=
s
> what I do.

Because as soon as a user logs in, and gets a token, ALL users who
have logged in now share that token. (In the absense of sshd creating
seperate PAG's for each login)


--
Jay Kline
http://www.slushpupie.com/