Print

Print


Hi Gerri,

    I cleaned it. Could you please review to make sure I didn't break 
anything?

Cheers,
    Lukasz

On 10/10/2011 02:56 PM, Gerardo Ganis wrote:
>
>     Yes, nowadays it AFS uses krb5 for authentication while before it
> was using its own implementation of v4.
>     The code under R__AFS allowed users w/o a Kerberos token (i.e. w/o
> krb5 configured on their machine)
>     to authenticate against a server running AFS. We used it in this
> configuration on CAF at some point for
>     some users w/o a certificate.
>     But since, 1) it requires libraries not always available on systems
> (for example on  Fedora 15 they are not);
>     (and I should check if this still works); and 2) it should always be
> possible to use Kerberos instead, I think
>     that the part of code under R__AFS can be dropped.
>
>     Gerri
>
> On 10/10/11 2:03 PM, Lukasz Janyst wrote:
>> And, if not, what is the difference?
>>
>>     Lukasz
>>
>> 2011/10/10 Lukasz Janyst<[log in to unmask]>:
>>> Isn't it equivalent to krb5 these days?
>>>   Lukasz
>>>
>>> 2011/10/10 Gerardo Ganis<[log in to unmask]>:
>>>>    Yes, R__AFS is used in the pwd module to enable the code for
>>>> authentication with an AFS
>>>>    password.
>>>>    Actually this code needed to be reviewed because it looks like it
>>>> was not
>>>> really working
>>>>    with the latest versions. I think we can just drop it and if
>>>> needed (not
>>>> sure how many
>>>>    people are using this) we could make a separate plug-in only for
>>>> that.
>>>>
>>>>    Cheers, Gerri
>>>>
>>>> On 10/10/11 1:50 PM, Lukasz Janyst wrote:
>>>>> In the passwd security module.
>>>>>
>>>>>    Lukasz
>>>>>
>>>>> 2011/10/10 Andrew Hanushevsky<[log in to unmask]>:
>>>>>> Hi Lukasz,
>>>>>>
>>>>>> Where does R__AFS get used? I don't recall that symbol.
>>>>>>
>>>>>> Andy
>>>>>>
>>>>>> On Mon, 10 Oct 2011, Lukasz Janyst wrote:
>>>>>>
>>>>>>> It should be fine now. There are two left: one is R__AFS (do we
>>>>>>> still
>>>>>>> need these AFS dependencies?), another is zeroconf (I'll deal with
>>>>>>> this when I figure out how to handle this entire business).
>>>>>>>
>>>>>>> Lukasz
>>>>>>>
>>>>>>> 2011/10/7 Andrew Hanushevsky<[log in to unmask]>:
>>>>>>>> OK, Thanks!
>>>>>>>>
>>>>>>>> Andy
>>>>>>>>
>>>>>>>> On Fri, 7 Oct 2011, Doug Benjamin wrote:
>>>>>>>>
>>>>>>>>> Hi Andy,
>>>>>>>>>
>>>>>>>>> I did see Lukasz' post.  I am happy to continue testing when
>>>>>>>>> rc2 comes
>>>>>>>>> out. This is what I agreed to do as part of the
>>>>>>>>> xrootd collaboration anyway.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Cheers,
>>>>>>>>>
>>>>>>>>> Doug
>>>>>>>>>
>>>>>>>>>
>>>>
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1