Re: [9fans] auth/login

Re: [9fans] auth/login

[okamoto]

> Factotum sort of broke login.
>
> When you run login, your process becomes owned by the new id.
> However, unless the factotum you are using is owned by a userid
> that can 'speak for' other uid's, your new process can't authenticate
> to any resources off of your machine.

I have same problem when I use auth/login at our full system,
however, I don't have no problem when I use the same command
in my home two PCs system (Auth/kfs + terminals).  I wonder what
is the difference between these two cases.

Kenji

Re: [9fans] auth/login

[Andrew]

On Fri, Nov 22, 2002 at 10:28:48AM +0900, okamoto@granite.cias.osakafu-u.ac.jp wrote:
> > Factotum sort of broke login.
> >
> > When you run login, your process becomes owned by the new id.
> > However, unless the factotum you are using is owned by a userid
> > that can 'speak for' other uid's, your new process can't authenticate
> > to any resources off of your machine.
>
> I have same problem when I use auth/login at our full system,
> however, I don't have no problem when I use the same command
> in my home two PCs system (Auth/kfs + terminals).  I wonder what
> is the difference between these two cases.
>
well the only thing different there is the file server, so possibly in
the way it speaks with factotum vs the way kfs speaks to factotum. just
a guess though.

Re: [9fans] auth/login

[okamoto]

> On Fri, Nov 22, 2002, okamoto@granite.cias.osakafu-u.ac.jp wrote:
>> I meant if user id is the only reason of that problem, why we see difference
>> between real full syatem and Auth/kfs system...
>
> You run as hostowner on the auth/kfs system, no?

No, I'm running auth/kfs server as name 'venus'
which responds to 'bootes' for many users, and has different user ID
from 'okamoto' running terminal, and is that hostowner.

Kenji

Re: [9fans] auth/login

[William Josephson]

On Fri, Nov 22, 2002, okamoto@granite.cias.osakafu-u.ac.jp wrote:
> I meant if user id is the only reason of that problem, why we see difference
> between real full syatem and Auth/kfs system...

You run as hostowner on the auth/kfs system, no?

Re: [9fans] auth/login

[okamoto]

> On Fri, Nov 22, 2002 at 10:28:48AM +0900, okamoto@granite.cias.osakafu-u.ac.jp wrote:
>> > Factotum sort of broke login.
>> >
>> > When you run login, your process becomes owned by the new id.
>> > However, unless the factotum you are using is owned by a userid
>> > that can 'speak for' other uid's, your new process can't authenticate
>> > to any resources off of your machine.
>>
>> I have same problem when I use auth/login at our full system,
>> however, I don't have no problem when I use the same command
>> in my home two PCs system (Auth/kfs + terminals).  I wonder what
>> is the difference between these two cases.
>>
> well the only thing different there is the file server, so possibly in
> the way it speaks with factotum vs the way kfs speaks to factotum. just
> a guess though.

I meant if user id is the only reason of that problem, why we see difference
between real full syatem and Auth/kfs system...

Kenji

Re: [9fans] auth/login

[okamoto]

> however, I don't have no problem when I use the same command
> in my home two PCs system (Auth/kfs + terminals).
should be
>however, I have no problem when I use the same command
> in my home two PCs system (Auth/kfs + terminals).

Yes, I'm a speaker of Japanglish. :-)

Kenji

Re: [9fans] auth/login

[presotto]

[-- Attachment #1: Type: text/plain, Size: 460 bytes --]

Factotum sort of broke login.

When you run login, your process becomes owned by the new id.
However, unless the factotum you are using is owned by a userid
that can 'speak for' other uid's, your new process can't authenticate
to any resources off of your machine.

One way around this is to run factotum as the new user and they
rebuild your name space.  I need to think about this.

In trying this out, I think I found an authentication bug also...

[-- Attachment #2: Type: message/rfc822, Size: 2040 bytes --]

From: Andrew <afrayedknot@thefrayedknot.armory.com>
To: 9fans@cse.psu.edu
Subject: [9fans] auth/login
Date: Wed, 20 Nov 2002 23:41:45 -0800
Message-ID: <20021121074145.GA27486@thefrayedknot.armory.com>

im having trouble getting this command to work the way i think its
supposed to.  in the man page it says that it allows you to change
your authenticated id. So if im understanding this right, if I booted
up as user A, and need to quickly do something as user B, i can type
auth/login B, enter the password, and do things as user B from within
that namespace. However when I do this, I have no permissions anywhere,
even to /usr/B/

i guess am i just totally missing the point of that command? or is
something misconfigured?

thanks
Andrew

misc background:
my plan 9 network has an auth server, cpu server, file server and diskless
terminal. This exchange occured on the terminal.

[9fans] auth/login

[Andrew]

im having trouble getting this command to work the way i think its
supposed to.  in the man page it says that it allows you to change
your authenticated id. So if im understanding this right, if I booted
up as user A, and need to quickly do something as user B, i can type
auth/login B, enter the password, and do things as user B from within
that namespace. However when I do this, I have no permissions anywhere,
even to /usr/B/

i guess am i just totally missing the point of that command? or is
something misconfigured?

thanks
Andrew

misc background:
my plan 9 network has an auth server, cpu server, file server and diskless
terminal. This exchange occured on the terminal.

Re: [9fans] auth/login

[presotto]

[-- Attachment #1: Type: text/plain, Size: 143 bytes --]

Fixed and updated on sources.  Login wasn't rforking the name space so
that the second time, you were connected to your own factotum as alice.

[-- Attachment #2: Type: message/rfc822, Size: 1513 bytes --]

From: "Kenji Arisawa" <arisawa@ar.aichi-u.ac.jp>
To: 9fans@cse.psu.edu
Subject: [9fans] auth/login
Date: Thu, 3 Oct 2002 12:26:18 +0900
Message-ID: <37235bb1538fe9956d3e2e6944fa0718@ar.aichi-u.ac.jp>

auth/login fails in second time.

# first time
term% auth/login alice
Password:
% term%
# second time
term% auth/login alice
Password:
login failed: writing alice@alice@ML+xzkTj/PheMyJu+tqjIpamzu4= to #¤/capuse: capability must match user
term%

[9fans] auth/login

[Kenji Arisawa]

auth/login fails in second time.

# first time
term% auth/login alice
Password:
% term%
# second time
term% auth/login alice
Password:
login failed: writing alice@alice@ML+xzkTj/PheMyJu+tqjIpamzu4= to #¤/capuse: capability must match user
term%