[OpenAFS] OpenAFS and sudo

Yvan Masson yvan.masson@univ-savoie.fr
Tue, 20 Jan 2015 16:59:58 +0100


Hi,

I'm currently preparing the installation of Debian 8 Jessie (the current
almost stable) workstations in an OpenAFS environment. Users can log in
with theirs AFS credentials.
My problem is that if a user use the "sudo" command, he looses his afs
token. After that, the user can use "aklog" to get a new token. The
Kerberos tickets are not destroyed.

I suppose that I should do someting with PAM, probably
in /etc/pam.d/sudo, but I don't know exactly what.

Thanks for your help,
YvanM