[OpenAFS-devel] Multiple AFS principals per pts id?

Neulinger, Nathan R. nneul@umr.edu
Thu, 4 Jan 2001 10:03:36 -0600


Would it be possible to modify the ptserver to allow multiple principal
names per pts id? 

I.e. I'd like to be able to have princ@REALM1 and princ@REALM2 when run
through aklog, both get the same pts id. Obviously the reverse lookup (get
name from id) would only return 1. Or alternatively, I guess I'm looking for
a way to modify the ptserver to be able to establish a cross-realm
trust/equivalency. (I would actually not have any objection to the ptserver
simply treating the two realms as 100% equivalent as one possible approach.)


Ideally, some way of saying "if I aklog with princ@REALM2, I want it to look
up the mapping to see what AFS access it really should give me as opposed to
princ@REALM2."

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@umr.edu
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216