porting CCAPI to UNIX

Russ Allbery rra at stanford.edu
Wed May 9 15:41:06 EDT 2007


Ken Raeburn <raeburn at MIT.EDU> writes:
> On May 9, 2007, at 15:31, Russ Allbery wrote:

>> AFS PAGs provide cross-session process isolation (well, not from root,
>> but that's a different matter).  I was actually under the impression
>> that keyrings did as well.

> Not when I tried running some keyring tests.

Are you using session keyrings?  It seems to work for me with the keyrings
used by AFS, but AFS is creating them as a privileged user as session
keyrings.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the krbdev mailing list