[OpenAFS] OpenAFS implementation questions.

Russ Allbery rra@stanford.edu
Thu, 25 May 2006 15:38:24 -0700


Derek Atkins <warlord@MIT.EDU> writes:

> Well, you should be able to get tickets/tokens through ssh, either via
> kerberos ticket passing or typing in a password.  In those cases your
> users can still run re-auth.

> However for batch processes, well, there's just not much you can do.

For batch processes, you pretty much have to allocate a separate principal
with AFS access, create a keytab for it, and hack AFS authentication into
your batch process using something like k5start.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>