[1029] in arla-drinkers
RE: forwarding tokens to other machine
daemon@ATHENA.MIT.EDU (Lyle Seaman)
Thu Jul 29 12:51:58 1999
From owner-arla-drinkers@stacken.kth.se Thu Jul 29 16:51:58 1999
Return-Path: <owner-arla-drinkers@stacken.kth.se>
Delivered-To: arla-drinkers-mtg@bloom-picayune.mit.edu
Received: (qmail 3967 invoked from network); 29 Jul 1999 16:51:57 -0000
Received: from unknown (HELO sundance.stacken.kth.se) (130.237.234.41)
by bloom-picayune.mit.edu with SMTP; 29 Jul 1999 16:51:57 -0000
Received: (from majordom@localhost)
by sundance.stacken.kth.se (8.8.8/8.8.8) id SAA12404
for arla-drinkers-list; Thu, 29 Jul 1999 18:47:30 +0200 (MET DST)
Received: from gw.stormsystems.com (stormsystems.com [209.49.190.30])
by sundance.stacken.kth.se (8.8.8/8.8.8) with ESMTP id SAA12397
for <arla-drinkers@stacken.kth.se>; Thu, 29 Jul 1999 18:47:19 +0200 (MET DST)
Received: from fs1.office.stormsystems.com (exchange.office.stormsystems.com [172.29.1.5])
by gw.stormsystems.com (8.9.3/8.9.1) with ESMTP id MAA15005
for <arla-drinkers@stacken.kth.se>; Thu, 29 Jul 1999 12:46:44 -0400
Received: by fs1.stormsystems.com with Internet Mail Service (5.5.2448.0)
id <P6WAHY79>; Thu, 29 Jul 1999 12:46:44 -0400
Message-ID: <B5C3AE5DDF77D211BD2500A0C9D3A6A11C0064@fs1.stormsystems.com>
From: Lyle Seaman <LSeaman@stormsystems.com>
To: arla-drinkers@stacken.kth.se
Subject: RE: forwarding tokens to other machine
Date: Thu, 29 Jul 1999 12:46:43 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2448.0)
Content-Type: text/plain;
charset="iso-8859-1"
Sender: owner-arla-drinkers@stacken.kth.se
Precedence: bulk
How are you extending AFS tokens? What "undocumented functions calls" are
you using? (Frankly, I don't know which calls are documented and which ones
aren't...)
I don't see how you can extend tokens without a password, a TGT or the KDC's
server key. The token extension mechanism that I have proposed to
developers of batch scheduling software (NQS, that kind of thing) relies on
having the server key available to the batch scheduler.
> problems. Is there a way to use the some token format in arla as in
> Transarcs AFS client? How can user tokens be extended without using
> Transarcs libraries and without giving any passwords in arla?
