[33469] in Kerberos
RE: [OpenAFS] Help: Can OpenSSH get OpenAFS token after the client
daemon@ATHENA.MIT.EDU (shoeb ahmed)
Sat Jun 11 17:04:53 2011
Message-ID: <COL104-W38F0340C624E6C5995579CF6670@phx.gbl>
From: shoeb ahmed <webmaster@digitalfamily.co.cc>
To: <kerberos@mit.edu>
Date: Sat, 11 Jun 2011 21:04:56 +0000
In-Reply-To: <COL104-W38F9D2D7EFA7EEA531C878F6670@phx.gbl>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
From: webmaster@digitalfamily.co.cc
To: bbense@slac.stanford.edu
CC: openafs-info@openafs.org; kerberos@mit.edu; webmaster@digitalfamily.co.cc
Subject: [OpenAFS] Help: Can OpenSSH get OpenAFS token after the client login?
Date: Sat, 11 Jun 2011 21:01:09 +0000
> From: rra@stanford.edu
> To: bbense@slac.stanford.edu
> Subject: Re: [OpenAFS] Re: Help: Can OpenSSH get OpenAFS token after the client login?
> Date: Sat, 11 Jun 2011 12:40:29 -0700
> CC: openafs-info@openafs.org; kerberos@mit.edu
> Booker Bense <bbense@slac.stanford.edu> writes:
>
> > [1]- To be honest I've forgotten exactly what the combination was, but
> > there was one edge case that I just couldn't get the pam based solution
> > to work. The sshrc solution is also required on OS X.
>
> I'd be really curious to get more details. (The solution to get
> pam-afs-session working on Mac OS X is to add "nopag" to the PAM module
> options. I'm considering making that the default on Mac OS X.)
>
> --
> Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
