[OpenAFS] OpenAFS API / Documentation?
Fri, 8 Dec 2006 11:25:43 -0800
On Fri, Dec 08, 2006 at 01:15:10PM -0600, Douglas E. Engert wrote:
> Kirk Patton wrote:
> >I am working on a small C program that needs to klog on behalf of a user.
> >We are running Sun Grid Engine and AFS. In order for a SGE job to access
> >AFS space, SGE needs to be able to switch to the users ID and authenticate
> >to AFS.
> You did not say what the trust relationships are between the user, the SGE
> and AFS. AFS requires some user credential to get obtain an AFS token.
I am caching the users password to an encrypted file that only my C program will
be able to decrypt. SGE would call my program which would decrypt the file and
then authenticate using the users password.
If that sounds like a strange way to accomplish the task, I am open to other methods.
> This could be a delegated Krb5 ticket, a grid proxy cert or even a password.
> What user credentials are available to the SGE to use to get the token?
> (I assume you are trying to get AFS tokens for the user, and not the SGE
> If the SGE is completely trusted by AFS to have authenticated the user,
> you could even get an AFS token without a delegated credential.
> >I was wondering if there are any tutorials/howto's or references that
> >could be of help.
> Douglas E. Engert <DEEngert@anl.gov>
> Argonne National Laboratory
> 9700 South Cass Avenue
> Argonne, Illinois 60439
> (630) 252-5444
Tel. 408 919-3055