[OpenAFS-port-darwin] OS X: afs tokens at login
Claudio Bisegni
Claudio.Bisegni@lnf.infn.it
Mon, 2 Jun 2008 19:01:02 +0200
--Apple-Mail-148-43148019
Content-Type: text/plain;
charset=US-ASCII;
format=flowed;
delsp=yes
Content-Transfer-Encoding: 7bit
Hi Jeffrey
I agree but the default cell, in some ambient could not necessarily be
the cell used for home directory, we must provide a metod that work in
every, strange, setup. I think that would be more functional if the
tokens were taken all to login time in the same code.
claudio
On 02/giu/08, at 18:49, Jeffrey Altman wrote:
> Claudio:
>
> I do not believe that the loginhook should obtain tokens for all
> cells but only for the cell from which the home directory is going
> to be read. After the home directory is read, then a per-user
> configuration file can be processed to obtain tokens for the rest of
> the cells.
>
> Other things such as the desktop symlink can be created after the
> user session starts.
>
> Jeffrey Altman
>
>
> Claudio Bisegni wrote:
>> Hi Duncan
>> Now with preference pane i write a file, TheseCell, wich contains
>> user selected cells for wich he want to get token.
>>
>> Using loginhook we must read the file TheseCell and call aklog for
>> every cell, or make aklog modification to use TheseCell. There
>> should be a version for aklog that work in this way.
>>
>> Using launchd I have made a little deamon to do this, reading user
>> pref managed by AFSPreference and calling aklog for each cell in
>> TheseCell file.
>>
>> Also if we are gonig to use loginhook we must always use a little
>> daemon that will manage the creation a destruction of desktop sym
>> link to an afs path( the next update for AFSPreference).
>>
>> What do you think about PreLogin Agents(http://developer.apple.com/samplecode/PreLoginAgents/index.html)?
>> it' seems that it run before login app is closed... should be seen
>> if run also befor user home is used.
>>
>> We must also begin to think for use launchd for afs startup.
>>
>> Ciao
>> Claudio
>>
>>
>> On 02/giu/08, at 18:14, Duncan S Kincaid wrote:
>>
>>> caudio
>>>
>>> loginhook is run by root (hence the required 'su' in line below)
>>> in the very earliest stages of the user login procedure.
>>> more info on loginhook can be found here:
>>> <http://docs.info.apple.com/article.html?artnum=301446>
>>>
>>> ciao
>>> dk
>>>
>>> On Jun 2, 2008, at 4:19 AM, Claudio Bisegni wrote:
>>>
>>>> hi derrick and Duncan,
>>>> do you know if loginhoock occur befor or after mi launchd login
>>>> startup hack?
>>>> i was thinking also to the prelogin launchd agent as described in
>>>> one apple tutorial.
>>>> On 02/giu/08, at 06:51, Derrick Brashear wrote:
>>>>
>>>>> On Sun, Jun 1, 2008 at 10:14 PM, Duncan Kincaid <dsk@mit.edu>
>>>>> wrote:
>>>>>> ciao claudio
>>>>>>
>>>>>> our solution is to use mac os x 'loginhook'.
>>>>>> the script called by loginhook needs to have this one line:
>>>>>> `su "$1" -c /usr/bin/'aklog -cell cellnamehere'`
>>>>>>
>>>>>
>>>>> I thought Leopard broke loginhook. I guess tomorrow I should
>>>>> just set
>>>>> up a host to try this on permanently.
>>>>> _______________________________________________
>>>>> port-darwin mailing list
>>>>> port-darwin@openafs.org
>>>>> https://lists.openafs.org/mailman/listinfo/port-darwin
>>>>
>>>> ----------------------------------------------------------------
>>>> Claudio Bisegni
>>>> mail: claudio.bisegni@lnf.infn.it
>>>> Fotografie: http://www.flickr.com/photos/jacod/
>>>>
>>>>
>>>
>>> _______________________________________________
>>> port-darwin mailing list
>>> port-darwin@openafs.org
>>> https://lists.openafs.org/mailman/listinfo/port-darwin
>>
>> ----------------------------------------------------------------
>> Claudio Bisegni
>> mail: claudio.bisegni@lnf.infn.it
>> Fotografie: http://www.flickr.com/photos/jacod/
>>
>>
----------------------------------------------------------------
Claudio Bisegni
mail: claudio.bisegni@lnf.infn.it
Fotografie: http://www.flickr.com/photos/jacod/
--Apple-Mail-148-43148019
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail-148-43148019--