[OpenAFS-devel] zepa.net?

[Nickolai Zeldovich]

"Tim C." <tim@umbc.edu> writes:

>   If you really want to restrict access to cells outside of yours from the web
> servers, why are you using a dynamic root?  I would suggest creating a
> root.cell volume and creating mounts for just your cell.  There doesn't seem to
> be any reason to use -dynroot in your situation.

Also, if you don't want to export directories from foreign cells via your web
servers, you might want to remove all but the local cells from your CellServDB
file on the web server, and not using the -afsdb flag (which allows automatic
discovery of AFS cells via DNS).

-- kolya