NAME

setpag − set process authentication group (AFS only)

SYNOPSIS

setpag()

DESCRIPTION

Setpag sets the process authentication group (pag), for this process and its descendants, to a unique number which is good until the kernel is rebooted.  The pag is transmitted to any remote file system agent which intercepts system calls using the Andrew file system kernel interface hooks.  The Andrew Cache Manager is the only commonly found example of such an agent.  When the Cache Manager receives a message from the kernel indicating that a system call has been intercepted, it authenticates that call on both the current pag and userid for that process; that is, it looks up authentication information based upon those values. 

The association of authentication information with a pag is accomplished by following setpag with a pioctl(2V) which will be intercepted by the Cache Manager.  The Cache Manager takes the pag and userid from the intercepted pioctl and associates them with the authentication information provided.  This provides an assurance to the caller that no other unrelated process (that is, with a different pag) with local IBM/4.3 authentication for the same user id will be interpreted as having Andrew file system authentication.  Code of this sort has been added to the Andrew versions of programs like su(1V), and login(1V), and rsh(1V) in order to support Andrew file system authentication. 

SEE ALSO

su(1V), login(1V), rsh(1V), pioctl(2V), and the Cache Manager and Kernel Support sections of the Andrew File System Guide.  This page intentionally left blank. 

PRPQs 5799-WZQ/5799-PFF: IBM/4.3  —  Sept 1988