[OpenAFS] Re: Slightly unrelated question
Fri, 28 Jan 2011 14:21:31 -0500
On Thu, Jan 27, 2011 at 10:53 AM, Andrew Deason <email@example.com> wrote:
> Integration with the Windows login system I believe is almost always
> done via AD. I think it's possible to not use AD if someone wrote a
> Kerberos pGina plugin (or maybe Samba, but that's just replacing AD, not
> getting rid of its role), but as far as I know nobody does that.
Back at U Wisc we did have a locally built GINA that authenticated to
Kerberos and got AFS tokens, along with a lot of other local logic. I
don't know if it's still in use nowadays.