[190] in Info-AFS_Redistribution

home help back first fref pref prev next nref lref last post

Re: changing "auth1" authentication method in AIX 3.1

daemon@ATHENA.MIT.EDU (Bob Andrews)
Wed Jul 3 15:12:29 1991

From: bob@ibmpa.awdpa.ibm.com (Bob Andrews)
To: jdh@bu-pub.bu.edu
Date: Wed, 3 Jul 91 11:03:01 PDT
Cc: Info-Afs@transarc.com
In-Reply-To: <9107031712.AA10756@colt45.bu.edu>; from "jdh@bu-pub.bu.edu" at Jul 3, 91 1:12 pm

jdh@bu-pub.bu.edu writes:
> Message-Id: <9107031712.AA10756@colt45.bu.edu>
> To: Info-Afs@transarc.com
> Subject: changing "auth1" authentication method in AIX 3.1
> 
> 
> In AIX 3.1 you can replace the standard system authentication method
> with /usr/afsws/bin/klog by changing the appropriate lines in the
> "login.cfg" and "user" files in the /etc/security directory.
> 
> This seems to work only partly.  When a user logs in, they are
> required to enter their AFS password, but they aren't granted any
> tokens.  Has anyone looked into why this happens?
> 
> jdh@pub.bu.edu
> 

This is happening because login is calling klog as root.  Since klog
doesn't do a setpag(), and since no one else does either (including
login), the tokens obtained from you typing your AFS password are
associated with uid zero.  Try su'ing to root after logging in with
the modified auth method, and you'll see your tokens.

		Bob

home help back first fref pref prev next nref lref last post