openafs: Improved calling of get-token script
authorClinton Ebadi <clinton@unknownlamer.org>
Tue, 19 May 2015 03:34:22 +0000 (23:34 -0400)
committerClinton Ebadi <clinton@unknownlamer.org>
Tue, 19 May 2015 03:34:22 +0000 (23:34 -0400)
commitc7c686966d382a88d97afba911e66b6814eac057
tree3466166f50a3054f1cc2868e63e1b0cf9a540a54
parent6d167bb1539ec7eeffd77bef20b73fee3761af63
openafs: Improved calling of get-token script

Directly fork/exec and change uid instead of relying on system() and
su in the external program. Newer libafs-pam-session, openafs client,
and kernel change behavior enough that running get-token as root and
su or sudoing to the target user does not acquire tokens correctly.
preauthuserdbcommon.c