Information on how to get kerberos ticket of the user in VFS/shell during conneciton

[Manfred Furuholmen]

Ok thanks ,  I will check if we have money to engage the support.

Br
FM

On Fri, Feb 23, 2018 at 8:41 AM, Volker Lendecke <Volker.Lendecke at sernet.de>
wrote:

> On Thu, Feb 22, 2018 at 09:41:20PM +0100, Manfred Furuholmen via
> samba-technical wrote:
> > the conversion is done by the aklog, you can find it in the src/aklog
> > directory in openAFS.
> > That is possible because it was implemented the 2b token, mainly
> kerberos 5
> > in rxkad.
> > The aklog is able to do several conversions, for the krb5 there is a
> > function call  rxkad_build_native_token
> > that is possible because it was implemented the 2b token in AFS , mainly
> > kerberos 5 in rxkad, the trick was to use kerberos 5 EncTicketPart
> instead
> > of kerberos 4 ditto.
>
> Ok, this means we have a chance.
>
> I think some developer needs to spend a few days on this. You should
> contact someone from https://www.samba.org/samba/support/ for paid
> support, as I don't think anybody will be able to find time for this
> in spare time.
>
> Regards, Volker Lendecke
>
> --
> Besuchen Sie die verinice.XP 2018 in Berlin,
> Anwenderkonferenz für Informationssicherheit
> vom 21.-23.03.2018 im Sofitel Kurfürstendamm
> Info & Anmeldung hier: http://veriniceXP.org
>
> SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
> phone: +49-551-370000-0, fax: +49-551-370000-9
> AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
> http://www.sernet.de, mailto:kontakt at sernet.de
>