PAM and arla
Michele A. Trovero
trovero at email.unc.edu
Thu Jul 8 05:35:41 CEST 1999
Charles
Here are some choices I ran into (BTW, use the list archives, they are
all mentioned somewhere):
Derrick Brashear's modules
{ftp://ftp.dementia.org/pub/pam} You will need
pam_krb4 and pam_afstok. Very likely it will not compile with KTH-KRB
out of the box. At least, it does not for me.
Chris Wing's module
{http://www-personal.engin.umich.edu/~wingc/pam_kafs.html}. It
seems full-featured, but I haven't tried it yet.
Tobias Schaefer's pam_linux_afs
{http://www.uni-hohenheim.de/~schaefer/linux/pam/}. As you
know, Tobias' module actually works by forking a copy of klog. To make it
work with kauth, either you hack his code, or you get
Chris Wing's klog {http://www-personal.engin.umich.edu/~wingc/kthkrb/} which is a
PERL wrapper for kauth so as to make it act as klog. You may
want to use the patch to kauth to add some options.
Nalin Dahyabhai's pam_krb4afs {http://www4.ncsu.edu/~nsdahya1/}. That's
what I am using. It does the job.
Best,
Michele
On Wed, 7 Jul 1999, Charles Karney wrote:
> I have been using the MIT version of AFS for Linux (2.0.x) with Tobias
> Schaefer's pam_linux_afs module for authentication + tokens. This invokes
> the klog command to do the authentication and the whole package works fine
>
> Recently, I've installed arla (0.25) and kth-krb (0.9.9) and would like to
> get AFS tokens automatically. I tried specifying
>
> klog_program /usr/athena/bin/kauth
>
> to pam_linux_afs (i.e., the kth-krb kauth program). However this bombs
> because pam_linux_afs tries to invoke it as
>
> /usr/athena/bin/kauth karney -silent -pipe
>
> with the -pipe indicating that the password is delivered via stdin. I
> could hack together a script to run kauth via expect, but I wonder if
> anyone has a neater solution.
>
> --
> Charles Karney
> Plasma Physics Laboratory E-mail: Karney at Princeton.EDU
> Princeton University Phone: +1 609 243 2607
> Princeton, NJ 08543-0451 FAX: +1 609 243 3438
>
More information about the Arla-drinkers
mailing list