[somewhat off] Re: loginwindow
[somewhat off] Re: loginwindow
- Subject: [somewhat off] Re: loginwindow
- From: Phillip Stark <email@hidden>
- Date: Mon, 15 Oct 2001 17:37:17 -0700
I am actually working on something similar. Under 10.0.x I was
working on a cocoa app that would ask for a password and verify this
with the Kerberos server, logging them out if the password was wrong.
Happily this ugly hack is unnecessary in 10.1 because Apple and MIT
have included a Kerberos custom authenticator plugin for loginwindow.
See the question about enabling the custom authenticator at:
http://web.mit.edu/macdev/Development/MITKerberos/Common/Documentation/faq-osx.html
With at properly configured kerb prefs file I can successfully get
both Kerb 4 and 5 tickets on login.
The next step is AFS. In theory one should simply be able to install
and run aklog at login to get afs tokens from the Kerb 4 tickets.
Unfortunately, I haven't been able to get the latest release of
openAFS to work on 10.1. I have heard that others have had trouble
here so I'm waiting for the next openAFS release (I haven't tried
building from more recent source code). I have also not found or
tried an aklog binary that is compiled for X but I haven't really
looked yet either.
Phillip
At 2:36 PM -0400 10/13/01, Matt Jarjoura wrote:
Well see, the idea behind the customization is to interact with the
Kerberos authentication system and log on to AFS. Then create a
temporary desktop for the user that will be cached to and from their AFS
home directory when the user logs on and out.
I mean, it appears that Apple uses loginwindow.app as the umbrella for
all user space interactions.
-Matt
--
*****************************************************************
Phillip Stark
Instructional Computing Lab Operations Manager
University of California, Santa Cruz
Got a question? Get an answer:
http://ic.ucsc.edu/help
*****************************************************************