[OpenAFS] Re: AFS version of sudo for admin ?

2010-12-17 Thread Andrew Deason
On Fri, 17 Dec 2010 15:59:31 +0100 Anders Magnusson ra...@ltu.se wrote: John Tang Boyland wrote: Does anyone know of a sudo like command for AFS admin commands? admindo vos release pkg.foo It would be nice, but not essential to have the token stick around for 5 minutes in case you

Re: [OpenAFS] Re: AFS version of sudo for admin ?

2010-12-17 Thread Anders Magnusson
Andrew Deason wrote: On Fri, 17 Dec 2010 15:59:31 +0100 Anders Magnusson ra...@ltu.se wrote: John Tang Boyland wrote: Does anyone know of a sudo like command for AFS admin commands? admindo vos release pkg.foo It would be nice, but not essential to have the token stick around

[OpenAFS] Re: AFS version of sudo for admin ?

2010-12-17 Thread Andrew Deason
On Fri, 17 Dec 2010 16:35:38 +0100 Anders Magnusson ra...@ltu.se wrote: This doesn't require you to enter a password for a release, though, which I assumed John wanted (it might help to say which specific aspects of 'sudo' you're looking for). That is, you can still 'kinit foo/admin' and

Re: [OpenAFS] Re: AFS version of sudo for admin ?

2010-12-17 Thread omalleys
We had a program we called afs-sudo. I don't know the origin. but I don't think it was passwordless. It appears there might be afs support in sudo already. http://www.sfr-fresh.com/unix/misc/sudo-1.7.4p4.tar.gz:a/sudo-1.7.4p4/auth/afs.c Quoting Andrew Deason adea...@sinenomine.net: On Fri,

[OpenAFS] Re: AFS version of sudo for admin ?

2010-12-17 Thread Andrew Deason
On Fri, 17 Dec 2010 15:35:07 -0500 omall...@msu.edu wrote: It appears there might be afs support in sudo already. http://www.sfr-fresh.com/unix/misc/sudo-1.7.4p4.tar.gz:a/sudo-1.7.4p4/auth/afs.c That appears to be for authenticating to kaserver for 'sudo' commands instead of PAM or whatever

Re: [OpenAFS] Re: AFS version of sudo for admin ?

2010-12-17 Thread omalleys
This should be a part of the afs permissions just in general. Ours was written in 2k and potentially updated once a long time before we had krb5 support and isn't passwordless. It uses an environment variable. It compiled against the 1.4.2 afs source. I can ask if I can donate it, if it