kstart 3.12 released
Russ Allbery
rra at stanford.edu
Wed Apr 23 18:18:28 EDT 2008
I'm pleased to announce release 3.12 of kstart.
k4start, k5start, and krenew are modified versions of kinit which add
support for running as a daemon to maintain a ticket cache, running a
command with credentials from a keytab and maintaining a ticket cache
until that command completes, obtaining AFS tokens (via an external
aklog) after obtaining tickets, and creating an AFS PAG for a command.
They are primarily useful in conjunction with long-running jobs; for
moving ticket handling code out of servers, cron jobs, or daemons; and
to obtain tickets and AFS tokens with a single command.
Changes from previous release:
krenew, when running a command, first copies the current ticket cache
to a private cache for that command so that it will be unaffected by
later destruction of the cache (such as by user logout). The private
cache is deleted when the command exits.
Fix problems with command-line parsing in k4start and k5start that
led to treating a provided command as a principal in some situations.
Allow for getopt() implementations that don't strip the -- argument
if it occurs after the first non-option (such as on at least older
Solaris).
k5start now uses krb5_cc_destroy() rather than unlink to clean up the
ticket cache when necessary.
Fix multiple problems with the libkafs and AFS system call checks
on platforms other than Linux that caused the libraries to leak into
the global LIBS and include checks done without the AFS include
paths.
Fix the ordering of LDFLAGS to avoid accidentally linking with the
AFS com_err library and ensure the AFS syscall layer is built with
the right CPPFLAGS.
If KRB5_CONFIG was explicitly set in the environment, don't use a
different krb5-config based on --with-krb4 or --with-krb5. If
krb5-config isn't executable, don't use it. This allows one to
force library probing by setting KRB5_CONFIG to point to a
nonexistent file.
Sanity-check the results of krb5-config before proceeding and error
out in configure if they don't work.
Fix Autoconf syntax error when probing for libkrb5support. Thanks,
Mike Garrison.
You can download it from:
<http://www.eyrie.org/~eagle/software/kstart/>
Debian packages have been uploaded to Debian unstable.
Please let me know of any problems or feature requests not already listed
in the TODO file.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list