[OpenAFS] OpenAFS on FC6 (OpenAFS, LDAP, SSH, gdm afs tokens etc etc...)

Ron Croonenberg ronc@depauw.edu
Wed, 05 Sep 2007 18:14:16 -0400


Hi Russ,

Uhm I am not using that module. Actually I can't find it after I
installed OpenAFS? Is it part of the OpenAFS distribution ?

Ron

Russ Allbery wrote:
> Simon Wilkinson <sxw@inf.ed.ac.uk> writes:
> 
>> The keyring related thing you're seeing is related to AFS PAGs. In
>> recent Linux kernels it hasn't been possible to maintain PAGs via the
>> previous group based system. So, a new mechanism using keyrings was
>> deployed. The keyring is set up by the AFS PAM module (ultimately, by
>> using the same AFS kernel module interface as created the group based
>> PAG). If, subsequent to that, you run a PAM module that resets the
>> keyring, then you can expect to lose the tokens.
> 
> If you're using the pam-afs-session module, just running it after the
> keyring module in the session stack would probably fix this problem, since
> then it would create the keyring after pam_keyring resets it.
> 

-- 
=================================================================
 It's is not, it isn't ain't, and it's it's, not its, if you mean
 it is. If you don't, it's its. Then too, it's hers. It isn't
 her's. It isn't our's either. It's ours, and likewise yours and
 theirs.
                                              -- Oxford Uni Press
=================================================================
 Ron Croonenberg                   |
                                   | Phone: 1 765 658 4761
 Lab Instructor &                  | Fax:   1 765 658 4732
         Technology Coordinator    |
                                   |
 Department of Computer Science    | e-mail: ronc@DePauw.edu
 DePauw University                 |
 275 Julian Science & Math Center  |
 602 South College Ave.            |
 Greencastle, IN  46135            |
=================================================================
 http://www.csc.depauw.edu/RonCroonenberg.html
=================================================================