[2564] in SIPB-AFS-requests
Re: RFD - Backup system: tape retiring, system overhaul/upgrade
daemon@ATHENA.MIT.EDU (Jonathon Weiss)
Wed Nov 27 00:57:07 1996
From: Jonathon Weiss <jweiss@MIT.EDU>
To: Eric Mumpower <nocturne@MIT.EDU>
Cc: Emil Sit <sit@MIT.EDU>, star-maintainers@MIT.EDU
In-Reply-To: Your message of "Sat, 23 Nov 1996 03:04:47 EST."
<199611230804.DAA19692@cutter-john.mit.edu>
Date: Wed, 27 Nov 1996 00:24:05 EST
> I'm pretty sure it'll be adaptable for our needs. The biggest issue I can
> think of will be either deciding that we trust a single service-key-file
> with root on all our servers, or enhancing the source code to let the backup
> program use its operator's kerberos tickets. (At the moment the backup
> server is designed to be run by cron on the server, which krsh's to the
> backup clients as root to get data.)
Although I haven't looked very carefully, I suspect that it would also
be fairly easy to get the current system to do this. I thing the
single key problem is still the major issue. Also keep in mind, that
I believe that there are people who current;y backup some of the
servers that do not have access to the others, and that if we went to
a system where we used a users tix for all servers, they wouldn;t be
able to help, unless they were given access to the other servers.
Jonathon
