[1959] in athena10
Re: pagbug workaround
daemon@ATHENA.MIT.EDU (Evan Broder)
Mon Mar 30 13:21:02 2009
Message-ID: <49D0FF41.2040902@mit.edu>
Date: Mon, 30 Mar 2009 13:20:01 -0400
From: Evan Broder <broder@MIT.EDU>
MIME-Version: 1.0
To: Evan Broder <broder@mit.edu>
CC: Greg Price <price@mit.edu>, linerva@mit.edu
In-Reply-To: <49D0A1A3.1020000@mit.edu>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
And now updated to do `klist -s && aklog -c athena.mit.edu -p "$HOME"`,
for the sake of people with out-of-cell homedirs.
Meanwhile, Nelson pointed this out:
dhcp-18-111-24-105:~ evan$ ssh -K broder@linerva.mit.edu tokens
bash: /mit/broder/.bashrc: Permission denied
Tokens held by the Cache Manager:
--End of list--
If you specify a command on the command line, I guess it doesn't count
as a login shell, so /etc/bash.bashrc is getting sourced instead of
/etc/profile.
So far, I know of two ways to work around this:
- Use $SHLVL in /etc/bash.bashrc and /etc/csh.cshrc to catch the
first-level login when $SHLVL = 1. I have no idea what the implications
of this are, and whether it will actually work correctly.
- Provide an /etc/ssh/sshrc file. sshrc (documented in the SSHRC
section in sshd(8)) gets sourced before running the user's shell, and
the documentation explicitly suggests AFS initialization as something
you might want to do there. Downside: apparently if you provide an
sshrc, it becomes your responsibility to do X forwarding initialization,
and the sample code in the manpage didn't work when I tried it on remus.
Opinions?
- Evan
Evan Broder wrote:
> I updated the code in both dotfiles to do `klist -s && aklog` instead of
> just `aklog` in case people are authenticating and not delegating. Or
> alternatively, so that root doesn't whine when you login about not
> having tickets.
>
> - Evan
>
> Greg Price wrote:
>
>> Evan's done this and now I get tokens on login. Cool.
>>
>> Greg
>>
>>
