Subject: Re: AFS requirement
To: Jun-ichiro itojun Hagino <itojun@iijlab.net>
From: Bill Studenmund <wrstuden@netbsd.org>
List: tech-security
Date: 09/10/2003 20:40:14
On Wed, 10 Sep 2003, Jun-ichiro itojun Hagino wrote:

> 	what exactly does AFS require from authentication code?  if someone
> 	could give me pointer i would be grateful.

As Johan noted, AFS uses Kerberos.

The problem isn't that AFS uses Kerberos, the problem is that it extends
the concept of ucred to include in-kernel Kerberos credentials. It does
that so that the file system can use said Kerberos credentials when
talking to the file server(s).

Setting up that in-kernerl Kerberos cache requires a system call (or more,
I'm not familiar with the exact innards of it).

Take care,

Bill