| Name : pam-afs-session
| |
| Version : 2.6
| Vendor : obs://build_opensuse_org/home:tootea
|
| Release : 6.1
| Date : 2017-01-18 11:26:50
|
| Group : Productivity/Networking/Security
| Source RPM : pam-afs-session-2.6-6.1.src.rpm
|
| Size : 0.08 MB
| |
| Packager : (none)
| |
| Summary : The pam-afs-session PAM module is intended for use with a Kerberos v5 PAM module to obtain an AFS PAG and AFS tokens on login. It puts every new session in a PAG regardless of whether it was authenticated with Kerberos and either uses Heimdal\'s libkafs or runs a configurable external program to obtain tokens. It supports using Heimdal\'s libkafs for the AFS interface and falls back to an internal implementation if libkafs isn\'t available
|
Description :
pam-afs-session is a PAM module that isolates each login in a separate AFS PAG (so that they will not trample on each other\'s AFS tokens) and supports either running an external program to obtain AFS tokens from a Kerberos v5 ticket cache or using Heimdal\'s libkafs library. It does not obtain tickets itself and must be used in conjunction with a Kerberos v5 PAM module to obtain tokens (setting up PAGs can be done without any Kerberos implementations). It provides only the setcred and session PAM functions.
There are two ways this module can obtain tokens:
If you have Heimdal\'s libkafs library available and build this module with Kerberos support (passing --with-kerberos to configure), the module can call libkafs\'s krb5_afslog function to obtain tokens directly. If you are using Heimdal and obtaining tokens from Kerberos tickets, this is the recommended configuration, since it means the PAM module doesn\'t have to fork an external process. If built in the fashion described above, this will be the default unless program is set in the module configuration.
Otherwise, the module will run an arbitrary external program to obtain tokens. This is the most flexible option, works with MIT Kerberos in conjunction with the aklog program from OpenAFS or the afslog program from Heimdal, and can support programs that obtain AFS tokens via some means other than a Kerberos ticket cache created on login.
For the AFS system call layer, pam-afs-session supports linking with the Heimdal libkafs library or the libkopenafs library that will ship with later versions of OpenAFS and provides a similar interface. As a fallback, and to support a low-dependency build, it also comes with a simple AFS system call implementation for either Linux or platforms that use syscall to call AFS functions. To use the built-in system call interface on Linux, the system must run a new enough version of OpenAFS or Arla to support AFS system calls through ioctl on a file in proc. On other systems, configure must be able to find the AFS header afs/param.h in order to get the system call numbers for that platform.
Right now, this module will probably only work on Linux, Solaris, HP-UX, and Mac OS X, and will require gcc to even attempt to build on any other platform. Other PAM implementations will likely require some porting work.
The module can optionally be linked with Kerberos libraries to obtain configuration information from krb5.conf, to support the kdestroy option, and to use libkafs\'s functions for obtaining tokens. Either MIT Kerberos or Heimdal should work.
Authors:
--------
Russ Allbery
see http://www.eyrie.org/~eagle/software/pam-afs-session/
|
RPM found in directory: /packages/linux-pbone/ftp5.gwdg.de/pub/opensuse/repositories/home:/tootea:/ncbr/SLE_12_SP2/x86_64 |
Hmm ... It's impossible ;-) This RPM doesn't exist on any FTP server
Provides :
pam-afs-session
pam-afs-session(x86-64)
pam_afs_session.so()(64bit)
Requires :
