[OpenAFS] OpenAFS API / Documentation?

Kirk Patton kpatton@transmeta.com
Fri, 8 Dec 2006 11:25:43 -0800

On Fri, Dec 08, 2006 at 01:15:10PM -0600, Douglas E. Engert wrote:
> Kirk Patton wrote:
> >Hello,
> >
> >I am working on a small C program that needs to klog on behalf of a user.
> >We are running Sun Grid Engine and AFS.  In order for a SGE job to access
> >AFS space, SGE needs to be able to switch to the users ID and authenticate 
> >to AFS.  
> You did not say what the trust relationships are between the user, the SGE
> and AFS.  AFS requires some user credential to get obtain an AFS token.

I am caching the users password to an encrypted file that only my C program will
be able to decrypt.  SGE would call my program which would decrypt the file and
then authenticate using the users password.

If that sounds like a strange way to accomplish the task, I am open to other methods.


> This could be a delegated Krb5 ticket, a grid proxy cert or even a password.
> What user credentials are available to the SGE to use to get the token?
> (I assume you are trying to get AFS tokens for the user, and not the SGE 
> itself.)
> If the SGE is completely trusted by AFS to have authenticated the user,
> you could even get an AFS token without a delegated credential.
> >
> >I was wondering if there are any tutorials/howto's or references that 
> >could be of help.
> >
> >Thanks,
> >Kirk
> >
> >
> -- 
>  Douglas E. Engert  <DEEngert@anl.gov>
>  Argonne National Laboratory
>  9700 South Cass Avenue
>  Argonne, Illinois  60439
>  (630) 252-5444

Kirk Patton
Unix Administrator
Transmeta Inc.
Tel. 408 919-3055