AW: [OpenAFS] Check free space on AFS share before login

Richter, Michael
Thu, 2 Feb 2017 13:42:18 +0000

OK, did so. But: running "vos examine" in a shell works. If I put the same =
line into a script and call this script on the same shell, it doesn't work =
and gives me this error:

vsu_ClientInit: Could not get afs tokens, running unauthenticated.

Michael Richter

Technische Universit=E4t Berlin

Fasanenstra=DFe 88, 10623 Berlin
Telefon: +49 (0)30 314-76310

-----Urspr=FCngliche Nachricht-----
Von: []=
 Im Auftrag von Stephan Wiesand
Gesendet: Donnerstag, 2. Februar 2017 13:01
Betreff: Re: [OpenAFS] Check free space on AFS share before login

> On 2 Feb 2017, at 12:43, Richter, Michael <> wrote:
> Actually trying... The message comes to the user in LightDM. But I don't =
have access to the AFS share of the user. I assume it's because pam_exec ru=
ns before pam_afs_session:
> -- /etc/pam.d/common-auth
> ~~~
> auth    [success=3D3 default=3Dignore] minimum_uid=3D100=
> auth    [success=3D2 default=3Dignore] nullok_secure try=
> # auth against two domains via LDAP
> auth    [success=3D1 default=3Dignore] use_first_pass=20
> auth    requisite             
> auth    required              
> # mount OwnCloud via webdav
> auth    optional
> auth    optional              
> auth    optional              
> # check free space in AFS
> auth    requisite stdout seteuid /opt/
> ~~~
> pam_afs_session is optional because there are users from another domain w=
ithout an AFS share. The check_free script checks this by itself. I've set =
it to required too. But still the same. The script doesn't have access to t=
he AFS share. According to the manual of PAM there is no way to set an orde=
> Maybe this doesn't work because it's in the PAM process?
> Any hints?

First, let me second Jonathan's objection to produce any output in the comm=
on pam stack. I'd really really put it into /etc/pam.d/lightdm (right after=
 the @include common-auth).

And you don't need read access to the volume root in order to find out. Par=
sing the output of "vos examine -format" should be simple enough.
Stephan Wiesand
Platanenallee 6
15738 Zeuthen, Germany

OpenAFS-info mailing list