[2396] in Kerberos
rexec / simple Kerberos jacket for a naive application
daemon@ATHENA.MIT.EDU (Peter Lister, Cranfield Computer C)
Wed Nov 25 10:22:35 1992
To: info-afs-kerberos@transarc.com, kerberos@Athena.MIT.EDU
Cc: ccprl@xdm001.ccc.cranfield.ac.uk, me028a@xdm001.ccc.cranfield.ac.uk
Date: Wed, 25 Nov 92 14:45:35 GMT
From: "Peter Lister, Cranfield Computer Centre" <ccprl@xdm001.ccc.cranfield.ac.uk>
Is there such a thing as Kerberised rexec/rexecd? I would like to
"Kerberise" a non-Kerberised client server application which uses rexec.
This leads me to wonder if a simple package exists to "Kerberise" an
arbitrary application (not using rexec, and when client source is
available) so that neither the client nor server should notice anything
out of the ordinary.
Specifically:
A client routine replaces connect(2) in the client, it calls connect(2)
itself, then obtains a ticket for the service and authenticates with
the server. It then passes across user information, including an AFS
token, so that the remote process has access to the user's files.
The server end authenticates the client with a local srvtab and ACL,
runs AFS setpag()/aklog, setuid(3)s and execv(3)s the application
server binary (or drops the connection if the authentication fails). It
would (optionally) also obtain the user's passwd record and "fake" it
on the remote system and fork, waiting until the server process dies,
like Athena login.
Peter Lister p.lister@cranfield.ac.uk
Computer Centre,
Cranfield Institute of Technology, Voice: +44 234 750111 ext 2828
Cranfield, Bedfordshire MK43 0AL England Fax: +44 234 750875
