[OpenAFS-port-darwin] re: krbafs for KfM ...

Sandor W. Sklar ssklar@stanford.edu
Fri, 19 Oct 2001 19:49:35 -0700


At 7:43 PM -0400 10/19/01, Aaron Rosenblum wrote:
>I have been playing with Arla on MacOS 10.1.  It builds with 
>kth-krb, but not with MIT KfM.  MIT KfM 4.0 is now the official 
>kerberos implementation on MacOS X and to get Arla to work with KfM 
>one needs to build it with a library called krbafs.  Unfortunately 
>(to my knowledge) it appears that 'krbafs' has not been updated in a 
>matter of years, and thus is not aware of MacOS X in the configure 
>script.  There may be some other issues as well.

I asked a similar question several days ago on another list, and 
received this reply from one of the MIT developers ...

>>>I am right now in the middle of working on a version of krbafs 
>>>which configures and builds correctly on Mac OS X 10.1.
>>>
>>>There are a few changes which need to be made because KfM defines 
>>>several functions such as afs_string_to_key() which krbafs also 
>>>tries to define.  I'm adding autoconf checks to work around this. 
>>>There are also a few problems due to bugs in the unix 
>>>compatibility libraries in 10.1 and differences in header file 
>>>locations.
>>>
>>>As soon as I'm done, I'm going to hand my patches back to the 
>>>openafs folks.  At that point I will set up a web page with build 
>>>instructions for Mac OS X 10.1, and I will send mail to this list 
>>>with a pointer.

My goal is probably similar to yours, in that I want users to login 
to MacOS X via their kerberos password, getting an afs token upon 
successful login, and have their home directories located within afs.

Some people have gotten the above working, but not using KfM (and 
perhaps not with *all* of the beautiful integration the above 
implies.)  We're not there yet, but it's oh so close!

-s-
-- 
------------------------------------------------
sandor w. sklar                |    Non impediti
unix systems administrator     |         ratione
stanford university itss-css   |    cogitationis
     -------------------------------------------------