[8434] in Info-AFS_Redistribution
Re: Can there be an AFS group with members of other cells in it?
daemon@ATHENA.MIT.EDU (Mitch Collinsworth)
Fri Jan 26 13:44:23 2001
Date: Fri, 26 Jan 2001 13:14:05 -0500 (EST)
From: Mitch Collinsworth <mitch@ccmr.cornell.edu>
To: Morris Strongson <mms@bnl.gov>
Cc: "info-afs@transarc.com" <info-afs@transarc.com>,
Maurice Askinazi <askinazi@bnl.gov>
In-Reply-To: <3A71A4D6.AB1EE052@bnl.gov>
Message-Id: <Pine.LNX.4.10.10101261310570.22935-100000@ruby.ccmr.cornell.edu>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Fri, 26 Jan 2001, Morris Strongson wrote:
> We have users in another cell to whom we want to give access
> certain files in our cell. Is there a way to create a group
> in cell "abc", such as "xyzfolks" with such entries as
> "person1@xyz" (with proper syntax) so the specified
> people in the xyz cell can access specified files
> in the abc cell?
Not that I've ever heard of. The way we've always done this is
with authentication-only accounts. This is an account that has
a kas identity but no password file entry or home directory.
The person can then klog and get a token in your cell but can't
actually login on any of your systems. You can then put their
identity in your cell into a group in your cell.
-Mitch
