Re: [9fans] Drawterm and security

[Robert Raschke <rrplan9@tombob.com>]

Skip Tavakkolian wrote:
> term% cat $home/bin/rc/dt_factotum
> #!/bin/rc
>
> if (! test -f /srv/factotum.$user)
> 	auth/factotum -s factotum.$user
> mount -b /srv/factotum.$user /mnt

Hmm, all I do is start a plain auth/factotum in my profile when I
recognise that I'm running a drawterm connection.  What is the reason
for ensuring an explicit service name?  By default it doesn't announce
a service, and if I understand correctly, the /mnt/factotum/ is going
to be the correct one (i.e., not the one mounted by bootes) for the
drawterm session.

About the original problem of factotum not prompting for passwords,
one of the issues I had in the early days was that factotum attempted
to collect my password from the console.  And that didn't work when I
connected via drawterm.  I got around that by starting fgui explicitly
via 'window -hide auth/fgui' in my riostart script.

Robby