[OpenAFS] Re: AFS version of sudo for admin ?

Anders Magnusson ragge@ltu.se
Fri, 17 Dec 2010 16:35:38 +0100


Andrew Deason wrote:
> On Fri, 17 Dec 2010 15:59:31 +0100
> Anders Magnusson <ragge@ltu.se> wrote:
>
>   
>> John Tang Boyland wrote:
>>     
>>> Does anyone know of a "sudo" like command for AFS admin commands?
>>> 	admindo vos release pkg.foo
>>> It would be nice, but not essential to have the token stick around
>>> for 5 minutes in case you need to do another admindo soon afterwards.
>>>       
>> Make a simple script (heimdal):
>>     
>
> This doesn't require you to enter a password for a release, though,
> which I assumed John wanted (it might help to say which specific aspects
> of 'sudo' you're looking for). That is, you can still 'kinit foo/admin'
> and walk away and someone else can vos whatever.
>   
Eh, how?  You loses your pag when kinit exits, so no credentials left...?

-- Ragge