[OpenAFS] pam-afs-session 1.3 released
Wed, 11 Apr 2007 15:12:36 -0700
I'm pleased to announce release 1.3 of pam-afs-session.
pam-afs-session is a PAM module intended for use with a Kerberos v5 PAM
module to obtain an AFS PAG and AFS tokens on login. It puts every new
session in a PAG regardless of whether it was authenticated with Kerberos
and either uses Heimdal's libkafs or runs a configurable external program
to obtain tokens. It supports using Heimdal's libkafs for the AFS
interface and falls back to an internal implementation if libkafs isn't
Changes from previous release:
Add a notokens configuration option which, when set, tells the module
to only create a PAG and not to try to obtain tokens. Based on a
patch from Jason McCormick.
When forking an external aklog, also close standard input and reopen
it to /dev/null. Normal aklog programs won't try to read from
standard input, but don't connect their standard input to any stray
file descriptor inherited by the process just in case.
Make --with-kerberos and --without-libkafs work properly together.
Improve diagnostics around token acquisition. Thanks, Jeff Blaine.
You can download it from:
Debian packages have been uploaded to Debian unstable.
Please let me know of any problems or feature requests not already listed
in the TODO file.
Russ Allbery (email@example.com) <http://www.eyrie.org/~eagle/>