I had a request from a small group locally that needs to access their AFS space(s) via a Windows file share - installing the AFS client on these systems is not an option.

So I started looking into doing this via Samba, using a dedicated server (RHEL6). I've got normal shares working, using Kerberos authentication to connect (works from OSX, Windows, etc).

A little research turned up a suggestion of doing something like this in the smb.conf for AFS shares:

...
root preexec = /usr/bin/aklog -setpag -cell mycell.mil -keytab /usr/afs/etc/rxkad.keytab -principal %u
...

This almost works but I think I'm running into either PAG issues or some other weirdness. Testing the connection it appears that sometimes I get tokens, sometimes I don't. Not sure if I need to force the smbd into a new PAG on startup.

  Anyone else try this before ?


--Craig

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to