[OpenAFS-devel] Can I use AFS file system without authenrication?

Kevin Coffman kwc@citi.umich.edu
Tue, 22 Jan 2002 09:09:55 -0500


> > > I want use AFS, but I don't want any authentication. Can I disable
> > > token but still can access AFS? Namely, I want to use AFS to simulate
> > > NFS. Thanks.
> >
> > You can use IP ACLs (they're rather coarse in that they only do classful
> > networks) or just use system:anyuser to let anyone read or if that's what
> > you want, let anyone write. AFS does not however do host and uid-based
> > authentication.
> 
> Well, you could create groups of IP addresses... but still pretty tedious.
> 
> The problem I see is that the UNIX file permissions are ignored under AFS.

I don't think this statement is true.  UNIX file permissions are
applied in addition to the AFS ACLs.  Turn off the read bits for
a file in AFS and try to read it.

K.C.