[OpenAFS-devel] problem about authentication

³¯¤¹¸t u85021@ice.ntnu.edu.tw
Thu, 31 Jan 2002 14:15:12 +0800


Thanks so much.
Your answer solve my doubt.
Can you tell me how to add the second machine to the existing cell?
Or tell me the document that I can refer to.

----- Original Message -----
From: <Craig_Everhart@transarc.com>
To: "openafs-devel" <openafs-devel@openafs.org>; "³¯¤¹¸t"
<u85021@ice.ntnu.edu.tw>
Sent: Wednesday, January 30, 2002 11:02 PM
Subject: Re: [OpenAFS-devel] problem about authentication


> Excerpts from transarc.external.openafs: 30-Jan-02 [OpenAFS-devel]
> problem abo.. =?big5?B?s6+kubh0?=@ice. (2018*)
>
> > I have a problem about authentication. I have 2 machines A and B, their
=
> > afs cell name are A.afs and B.afs respectively. Machine A has 2 users =
> > user_a1 and user_ a2. Machine B has 2 users user_b1 and user_b2. Now =
> > user_a1 login Machine B, but when I issue "klog user_a1", it can't =
> > access authentication database in Machine A, however it access database
=
> > in Machine B, so user_a1 can't get tokens. How can I solve this problem?
=
> > In other words, how can I use user mobility in AFS(AFS says that it =
> > support full user mobility)?
>
> Did you really mean to put the machines into different AFS cells?  The
> easy way to provide mobility is to put the clients into the same cell.
> This would mean creating one cell for one machine and then simply adding
> the second machine to the existing cell.
>
> If you really want different cells, then indeed (as Derek says) you need
> to indicate the realm in which you want authentication to happen.
>
> Craig