[12898] in Athena Bugs
Re: sun4 7.7K: login/xlogin/kerberos tickets/aklog
daemon@ATHENA.MIT.EDU (warlord@MIT.EDU)
Tue Nov 15 20:41:46 1994
From: warlord@MIT.EDU
Date: Tue, 15 Nov 94 20:41:43 EST
To: Karen Walrath <karen@MIT.EDU>
Cc: bugs@MIT.EDU
In-Reply-To: [12895]
Karen,
First, I should point out that it is not tickets, but AFS tokens,
that are being shared.
That having been said, I should ask if you are running with a special
/bin/login, or if you are running the the default OS /bin/login.
Basically, the login program is not setting up a Process
Authentication Group (PAG). This means that it is using your UID as a
means to separate tokens.
You can force yourself to get a new PAG by running the command pagsh,
which will give you a new shell with a new PAG. This will protect
those tokens from other processes.
I thought that xlogin creates a new PAG, however just testing it now
on a sun shows that it does not. On a DECstation, it shows that a PAG
is being created by xlogin. So, this is a bug in the Solaris xlogin.
As for the telnet session, that is a bug in the /bin/login program.
-derek
