[294] in Info-AFS_Redistribution

home help back first fref pref prev next nref lref last post

re: AFS Server Shutdown Question

daemon@ATHENA.MIT.EDU (Martin R. Calsyn)
Thu Aug 22 14:50:33 1991

To: info-afs@transarc.com
Date: Thu, 22 Aug 91 13:25:41 CDT
From: Martin R. Calsyn <martin@iastate.edu>


I just logged onto our server (fs-6) as `root' and did :

        bos shutdown fs-6 -localauth

and it bought it.  No admin privs were given to root, just the fact that
root can read the KeyFile allows it to construct an authenticator.  This
would take care of shutdown scripts on the server.

You could also give group read access to KeyFile to a clerk account
but I think that's giving away a lot more than just bos shutdown access.
I haven't checked what commands all take -localauth.

--
Martin R. Calsyn                                   martin@iastate.edu
Project Vincent Systems Support                    gg.mrc@isumvs.bitnet
Iowa State University Computation Center           voice: (515) 294-9889 
Ames, Iowa 50011                                   fax:   (515) 294-1717

home help back first fref pref prev next nref lref last post