[OpenAFS-port-darwin] How to set encryption by default on OS X

Arthur Prokosch arthurp@csail.mit.edu
Tue, 6 Mar 2012 16:11:36 -0500


On Tue, Feb 14, 2012 at 11:12:16AM -0500, Derrick Brashear wrote:
> edit /var/db/openafs/etc/config/afs.conf and set an AFS_POST_INIT
> scriptlet to do it, e.g.
> AFS_POST_INIT=postcmd
> 
> postcmd() {
>     fs setcrypt on

Why is this much not a part of _every_ Mac OS install?  Since crypt ON
has been the default on other platforms (at least: debian packages,
ubuntu packages, Windows installers), it's rather jarring to learn
that crypt defaults to OFF on mac os.

Are there obstacles to making this work, other than adding a few lines
to the default afs.conf in the installer package?

If the answer is "only someone's time to submit a patch" -- will
http://wiki.openafs.org/AFSLore/GitDevelopers/
steer me in the right direction?

>     fs mariner localhost
>     /Library/OpenAFS/Tools/tools/growlagent-openafs &
> }

growlagent-openafs isn't present in that path on 1.4.14.  Is
it new as of 1.6? (I've been waiting for 1.6.1 before upgrading mac os
clients from 1.4.x; don't seem to have a 1.4.14.1 handy.)

Thanks,
-arthur.