[OpenAFS-port-darwin] Kerberos Plugin that calls a script (was Re: [OpenAFS-devel] aklog on MacOS X )

[Ragnar Sundblad]

On 24 apr 2006, at 19.25, Ben Poliakoff wrote:

> I admit to coming into this conversation mid-stream.  I hadn't  
> actually
> looked at your (Ragnar) plugin until a few moments ago.  I see now  
> that
> you've taken great care in making your plugin work with both  
> OpenAFS and
> Arla.

Yes, please misunderstand me right :-) - my plugin was just recently put
together and it still isn't as finished as I want it to.

My part in making it work with both OpenAFS and Arla (and MIT kerberos
and Heimdal) was just using the krbafs lib from MIT, which is made for
just that, for aklogging/afslogging and work with both OpenAFS and Arla
and both MIT-krb and Heimdal on all platforms. I wish all
aklogging/afslogging programs could just use that.
(Well, I had to update it too.)

The krbafs lib is actually the kafs lib from Heimdal broken out
and made stand alone.

Bil happened to ask me of the feasibility of running a shell script
instead, a thought that had just recently struck me too, or maybe just
run a aklog/afslog program. I gave him a few hints and he put together
the afslogscript plugin.

So I fully support Bil's idea, I just am not yet sure that it is
an apple blessed solution. Probably my solution of setuiding
when ran as root at loginwindow time could couse some problems too,
and probably isn't really the ultimate solution either. It just seems
to work, too (and has done so for 10.3 too with the previous version
of afslog.loginLogout).

/ragge