OpenAFS CVS Commit: openafs/src/config by jaltman
Wed, 07 Dec 2005 20:13:32 EST
Update of /cvs/openafs/src/config
In directory GRAND.CENTRAL.ORG:/home/jaltman/openafs/cvs-1-3/src/config
This patch extends the krb.conf file allowing the specification of
multiple realms which should be treated as equivalents to the local
cell authentication domain. Additional realms are specified on the
first line of the krb.conf file and are separated by white space.
In addition, the patch adds a new file stored in the same directory
as the krb.conf file called krb.excl. This file contains a list of
principal names, one per line, that must not be treated as local
The purpose of this patch is to allow organizations that are supporting
multiple realms with synchronized user principal databases to allow
their users to login with any of the realms and treat the principal
names as equivalent to the local PTS identity. The exclusion is
to allow certain names, such as those for administrative IDs, to be
restricted to a subset of the realms.
Further optimization of the afs_krb_exclusion() should be performed to
remove the need to re-read the file. This patch should be considered
a temporary solution until a more permanent set of extensions to the
PT database and RPCs allow for the assignment of mechanism specific
aliases for PT IDs.
--- DELTA config follows ---
multiple-local-realms-20051208 openafs/src/config/afs_sysnames.h 1.71 1.72