[OpenAFS] kimpersonate library
Benjamin Kaduk
kaduk@MIT.EDU
Tue, 14 Jan 2014 13:48:17 -0500 (EST)
On Tue, 14 Jan 2014, Craig Huckabee wrote:
>
> I'm in the process of converting our small cell over to rxkad-k5 and
> eliminating DES but have hit a snag.
>
> We have a library of utility functions based on old code from aklog and
> gssklogd that give certain trusted applications the ability to create an AFS
> token using the KeyFile, create a PAG, etc.
>
> I'd like to update everything to be compatible with the rxkad-k5 changes
> and get away from some code assumptions about DES encryption.
>
> I've noticed the akimpersonate functions used by aklog, but those don't
> appear to be exported for external use. Has anyone else gone down this
> rabbit hole already before I go too far ?
The kimpersonate functionality from aklog was moved to libauth on the 1.4
and 1.6 branches (but not master) for use in server-to-server
functionality.
-Ben Kaduk