[OpenAFS] Remarks: aklog+pagsh SL7 x64
r.laatsch
Rainer.Laatsch@t-online.de
Sun, 3 Jun 2018 00:14:23 +0200
This is a multi-part message in MIME format.
--------------E983AA620338E76CEF8876CC
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
The PAG's now are now done via keyctl . The configure of at least
openafss-1.6.21.1 checks this , look for KEYCTL_SESSION_TO_PARENT around
line 23282
But the generated Makefile in src/aklog does not include -lkeyutils ,
there i change to
AKLIBS = -L/opt/krb5/lib -lkrb5 -lk5crypto -lcom_err -lkrb5support
-lkeyutils -lcrypt -lresolv
aklog -setpag then gets a token with a PAG (check with: keyctl show )
Best regards
Rainer
On 06/01/18 04:58, Daria Phoebe Brashear wrote:
>
> On Thu, May 31, 2018 at 11:39 AM, Stephan Wiesand
> <stephan.wiesand@desy.de <mailto:stephan.wiesand@desy.de>> wrote:
>
> Indeed. The SL packaging renames pagsh to pagsh.openafs to avoid
> clashes with other software like heimdal providing it.
>
> Regarding aklog, I thought that -setpag was broken on Linux many
> years ago.
>
>
> It was.
>
> The ability to rewrite a parent's state (which is what aklog -setpag
> needs) doesn't work
>
>
> --
> Daria Phoebe Brashear
> AuriStor, Inc
> dariaphoebe.com <http://dariaphoebe.com>
>
--------------E983AA620338E76CEF8876CC
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>The PAG's now are now done via keyctl . The configure of at least</p>
<p>openafss-1.6.21.1 checks this , look for KEYCTL_SESSION_TO_PARENT
around line 23282</p>
<p>But the generated Makefile in src/aklog does not include
-lkeyutils , there i change to</p>
<p> AKLIBS = -L/opt/krb5/lib -lkrb5 -lk5crypto -lcom_err
-lkrb5support -lkeyutils -lcrypt -lresolv</p>
<p>aklog -setpag then gets a token with a PAG (check with: keyctl
show )</p>
<p>Best regards</p>
<p>Rainer</p>
<p><br>
</p>
<p> <br>
</p>
<br>
<div class="moz-cite-prefix">On 06/01/18 04:58, Daria Phoebe
Brashear wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAMHoRJi2_j3f5AneeMpXL5ctEgtB-iWbNO4iros5YOyPonsnWA@mail.gmail.com">
<div dir="ltr">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, May 31, 2018 at 11:39 AM,
Stephan Wiesand <span dir="ltr"><<a
href="mailto:stephan.wiesand@desy.de" target="_blank"
moz-do-not-send="true">stephan.wiesand@desy.de</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Indeed.
The SL packaging renames pagsh to pagsh.openafs to avoid
clashes with other software like heimdal providing it.<br>
<br>
Regarding aklog, I thought that -setpag was broken on
Linux many years ago.<br>
<br>
</blockquote>
<div><br>
</div>
<div>It was. <br>
</div>
</div>
<div class="gmail_quote"><br>
</div>
<div class="gmail_quote">The ability to rewrite a parent's
state (which is what aklog -setpag needs) doesn't work<br>
</div>
<br clear="all">
<br>
-- <br>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">Daria Phoebe Brashear<br>
</div>
<div>AuriStor, Inc<br>
</div>
<div><a href="http://dariaphoebe.com"
target="_blank" moz-do-not-send="true">dariaphoebe.com</a><br>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>
--------------E983AA620338E76CEF8876CC--