Add with-creds-run-aklog

This lets us get AFS tokens in a separate PAG

diff --git a/Makefile b/Makefile
index 49ce0b312595a17be876a2b05f84e72bdb6bfbe5..491662d03cc457480bc28002ff3e8fa9ccca0067 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -8,6 +8,7 @@ install:
        $(INSTALL) -d $(DESTDIR)/usr/bin
        $(INSTALL) -m 0755 $(srcdir)/bin/rksu $(DESTDIR)/usr/bin/rksu
        $(INSTALL) -m 0755 $(srcdir)/bin/with-creds $(DESTDIR)/usr/bin/with-creds
+       $(INSTALL) -m 0755 $(srcdir)/bin/with-creds-run-aklog $(DESTDIR)/usr/bin/with-creds-run-aklog
        $(INSTALL) -m 0755 $(srcdir)/bin/build-package $(DESTDIR)/usr/bin/build-package
 
 .PHONY: install

diff --git a/bin/with-creds b/bin/with-creds
index f91549b5e9ea968dadf25ba31ce2b44ef88d4daf..96551ee088d0eccc137f4837ebd70e7e19652b56 100755 (executable)
--- a/bin/with-creds
+++ b/bin/with-creds
@@ -65,9 +65,9 @@ fi
 
 PRINC=$KRBUSER$userpart_slash$REALMARG
 
-EXTRAOPTS=""
+WITH_CREDS_RUN=""
 if [ -n "$aklog" ]; then
-    EXTRAOPTS="-t"
+    WITH_CREDS_RUN="with-creds-run-aklog"
 fi
 
 TMPDIR=/tmp
@@ -79,11 +79,4 @@ export KRB5CCNAME=${TMPDIR}/krb5cc_${UID}_${KRBUSER}_${userpart}
 
 k5start -H 30 -u "$PRINC" $EXTRAOPTS
 
-#if klist -s -c $ccache; then
-#    export KRB5CCNAME=$ccache
-#else
-#    export KRB5CCNAME=$ccache
-#    kinit -p $KRBUSER$userpart_slash$REALMARG
-#fi
-
-exec "$@"
+$WITH_CREDS_RUN "$@"

diff --git a/bin/with-creds-run-aklog b/bin/with-creds-run-aklog
new file mode 100644 (file)
index 0000000..f36b225
--- /dev/null
+++ b/bin/with-creds-run-aklog
@@ -0,0 +1,4 @@
+#!/usr/bin/pagsh
+
+aklog
+exec "$@"

diff --git a/debian/changelog b/debian/changelog
index 8abcabc2196a976ff5b92443774eff06d5480834..4b19ecbfe22f0e16590e2e6dca5105d96e87480f 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
-mh-sysadmin-tools (1.6~test.2) UNRELEASED; urgency=low
+mh-sysadmin-tools (1.6~test.3) UNRELEASED; urgency=low
 
   * build-package: new script for package building via cowbuilder/pbuilder
+  * with-creds: add with-creds-run-aklog script to make `-a` work correctly 
 
  -- Michael Howe <michael@michaelhowe.org>  Thu, 07 Aug 2014 19:11:00 +0100