[OpenAFS-devel] unencumbered ptserver replacement almost complete

Chaskiel M Grundman cg2v@andrew.cmu.edu
Mon, 31 Jan 2005 12:21:00 -0500


--==========0663F90FC2F4698660E4==========
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--On Monday, January 31, 2005 05:23:33 -0600 Brett Trotter
<blt@eng.iastate.edu> wrote:

> Currently its working well with one exception, and I need a little insider
>  help. I can set flags such that vos will let me create volumes if i'm in
> the  system:administrators group equivalent, but fs will not let me
> traverse or  setacl's on parts of the filesystem that dont have acl's for
> my user despite  me being a member of the admin group. What flag do I need
> to set in  listElements or GetCPS, or is it somewhere else?
The id for the system:administrators group must be -204 (i.e. -204 must
appear in your CPS) if you want the fileserver to give you the implicit
access rights.

The fileserver knows a few other id's:

system:anyuser (ANYUSERID) == -101
anonymous (ANONYMOUSID) == 32766

the fileserver must get a valid response from GetCPS on both of these id's,
and it should always contain -101


ptserver.h exports a few other "constant" id's, but nothing other than the
ptserver itself makes use of them:

#define SYSVIEWERID     -203 (system:ptsviewers; allows full r/o access to
pts database)
#define SYSBACKUPID     -205 (system:backup; I don't know what this is for)
#define AUTHUSERID      -102 (system:authuser; all authenticated users.
This can appear in ACL's, but no software uses the constant ID)

--==========0663F90FC2F4698660E4==========
Content-Type: application/pkcs7-signature
Content-Transfer-Encoding: base64
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--==========0663F90FC2F4698660E4==========--