[OpenAFS] AFS token, SSH, KRB[5]

Christof Hanke hanke@rzg.mpg.de
Thu, 07 Jun 2007 22:12:57 +0300


Russ Allbery wrote:
> Rainer Laatsch <Laatsch@rrz.uni-koeln.de> writes:
> 
>> Interested parties might want to have a look at
>> /afs/rrz.uni-koeln.de/vol/pam/pam_runexec.tar
>> The pam_runexec is configurable to get a token by executing [KRB4]
>> klog+afslog or [KRB5] kinit+gssklog under pam. Config's are included.
>> In "auth", a pag is set, and a session based ticket file is also created.
>> In "session", the pag is recovered and the ticket file permissions
>> corrected, if needed.
> 
> Out of curiosity, what did you find was missing from existing PAM modules
> that led you to write your own?
> 
Out of curiosity,
you're american I assume, so why does the concept of competition rises
interest ?