[OpenAFS] aklog -setpag doesn't get a token

[Douglas E. Engert]

aklog has a -d option. It is very helpful.



FB wrote:
> Hi,
> 
> On Thu, Mar 22, 2007 at 02:04:23PM +0100, Sergio Gelato wrote:
>> * FB [2007-03-22 12:13:51 +0100]:
>>> Yes - but... 'aklog -setpag' actually creates a PAG. It just doesn't get a token.
>>> This set of commands works and creates a PAG with a token in it:
>>>
>>>  $ kinit
>>>  $ aklog -setpag
>>>  $ aklog
>> Are you sure the PAG isn't a preexisting one?
> 
> Yes, I'm 100% sure.
> 
> [snip]
> 
> Here's a demonstration session:
> 
>  $ unset KRB5CCNAME
>  $ ssh localhost
>  $ echo $$;id
>  31847
>  uid=10266(burk2) gid=15(kmem) Gruppen=15(kmem),24(cdrom),[...]
>  $ tokens
>  
>  Tokens held by the Cache Manager:
>  
>     --End of list--
>  $ kinit
>  Password for user@REALM:
>  $ echo $$;id

Add a klist here.

>  31847
>  uid=10266(burk2) gid=15(kmem) Gruppen=15(kmem),24(cdrom),[...]
>  $ aklog -setpag

Add a klist her to see if it got a ticket for afs.

Where is the echo:id that produced the next line?
>  31847
>  uid=10266(burk2) gid=15(kmem) Gruppen=34379,36420,15(kmem),24(cdrom),[...]
>  $ tokens
>  
>  Tokens held by the Cache Manager:
>  
>     --End of list--

Why did the PAG number change between the above and below.

>  $ echo $$;id
>  31946
>  uid=10266(burk2) gid=15(kmem) Gruppen=34379,36421,15(kmem),24(cdrom),[...]
> 
> Now let's get back grom the "sub-PAG":
> 
>  $ exit
>  $ echo $$
>  31847
>  $ aklog
>  $ tokens
>  
>  Tokens held by the Cache Manager:
>  
>  User's (AFS ID 10266) tokens for afs@cbs.mpg.de [Expires Mar 23 16:34]
>     --End of list--
>       
> 
> 
> 
> 
> [...] is a replacement for lots of application specific groups with gid < 1002
> 
> Regards,
> 
> Frank
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
> 
> 

-- 

  Douglas E. Engert  <DEEngert@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444