[OpenAFS] Features great and small

[Charles Karney]

 > From: Derrick J Brashear <shadow@dementia.org>
 > Date: Mon, 30 Jul 2001 11:56:26 -0400 (EDT)
 > 
 > On Mon, 30 Jul 2001, Charles Karney wrote:
 > 
 > >      kas create ... -copy_password admin
 > > 
 > >   to allow the password to be copied from the administrator's account so
 > >   that the adminitstrator and the user can jointly use kpasswd to update
 > >   the password at a later time.
 > 
 > if it's a joint operation, why can't the admin just run kas change for the
 > user to change it later?

Yes, this is fine too.  The mini-advantage of using kpasswd is that it
shows the new user how to change the password himself.  (Whereas kas is
just some magic as far as he's concerned.)

 > > * It's frequently necessary to change the ACL on a whole directory tree and
 > > 
 > >     find . -noleaf -type d -print0 | xargs -0r fs sa -acl NEWACL -dir
 > > 
 > >   is rather a mouthful.  How about
 > > 
 > >     fs setacl -dir dir+ -acl acl+ -recursive [-onevolume]
 > 
 > is
 > ws dirpath -d "fs sa %f system:anyuser rl someuser write"
 > reasonable? i should see what the license on ws (walk subtree) is

Yes, this is reasonable, but having recursion be built into fs setacl would
seem to be a bit more natural.  Also it would be nice to build some
knowledge of volume crossing into tools like ws and find.

-- 
Charles Karney			Email:	ckarney@sarnoff.com
Sarnoff Corporation		Phone:	+1 609 734 2312
Princeton, NJ 08543-5300	Fax:	+1 609 734 2586