Quoting Marc Dionne <marc.c.dio...@gmail.com>:
On Thu, Jan 27, 2011 at 10:53 AM, Andrew Deason
<adea...@sinenomine.net> wrote:
Integration with the Windows login system I believe is almost always
done via AD. I think it's possible to not use AD if someone wrote a
Kerberos pGina plugin (or maybe Samba, but that's just replacing AD, not
getting rid of its role), but as far as I know nobody does that.
Back at U Wisc we did have a locally built GINA that authenticated to
Kerberos and got AFS tokens, along with a lot of other local logic. I
don't know if it's still in use nowadays.
It was probably pgina, www.pgina.org or based on that project as it
did have AFS support. It works well with ldap. I didn't test the afs
module as we had some policies for people who didnt have AFS in place.
The afs code, iirc was similar to what was in the Samba vfs afs module.
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info
