Yes, nowadays it AFS uses krb5 for authentication while before it
was using its own implementation of v4.
The code under R__AFS allowed users w/o a Kerberos token (i.e. w/o
krb5 configured on their machine)
to authenticate against a server running AFS. We used it in this
configuration on CAF at some point for
some users w/o a certificate.
But since, 1) it requires libraries not always available on systems
(for example on Fedora 15 they are not);
(and I should check if this still works); and 2) it should always be
possible to use Kerberos instead, I think
that the part of code under R__AFS can be dropped.
Gerri
On 10/10/11 2:03 PM, Lukasz Janyst wrote:
> And, if not, what is the difference?
>
> Lukasz
>
> 2011/10/10 Lukasz Janyst<[log in to unmask]>:
>> Isn't it equivalent to krb5 these days?
>> Lukasz
>>
>> 2011/10/10 Gerardo Ganis<[log in to unmask]>:
>>> Yes, R__AFS is used in the pwd module to enable the code for
>>> authentication with an AFS
>>> password.
>>> Actually this code needed to be reviewed because it looks like it was not
>>> really working
>>> with the latest versions. I think we can just drop it and if needed (not
>>> sure how many
>>> people are using this) we could make a separate plug-in only for that.
>>>
>>> Cheers, Gerri
>>>
>>> On 10/10/11 1:50 PM, Lukasz Janyst wrote:
>>>> In the passwd security module.
>>>>
>>>> Lukasz
>>>>
>>>> 2011/10/10 Andrew Hanushevsky<[log in to unmask]>:
>>>>> Hi Lukasz,
>>>>>
>>>>> Where does R__AFS get used? I don't recall that symbol.
>>>>>
>>>>> Andy
>>>>>
>>>>> On Mon, 10 Oct 2011, Lukasz Janyst wrote:
>>>>>
>>>>>> It should be fine now. There are two left: one is R__AFS (do we still
>>>>>> need these AFS dependencies?), another is zeroconf (I'll deal with
>>>>>> this when I figure out how to handle this entire business).
>>>>>>
>>>>>> Lukasz
>>>>>>
>>>>>> 2011/10/7 Andrew Hanushevsky<[log in to unmask]>:
>>>>>>> OK, Thanks!
>>>>>>>
>>>>>>> Andy
>>>>>>>
>>>>>>> On Fri, 7 Oct 2011, Doug Benjamin wrote:
>>>>>>>
>>>>>>>> Hi Andy,
>>>>>>>>
>>>>>>>> I did see Lukasz' post. I am happy to continue testing when rc2 comes
>>>>>>>> out. This is what I agreed to do as part of the
>>>>>>>> xrootd collaboration anyway.
>>>>>>>>
>>>>>>>>
>>>>>>>> Cheers,
>>>>>>>>
>>>>>>>> Doug
>>>>>>>>
>>>>>>>>
>>>
