[OpenAFS-devel] Re: Initial implementation of RestrictedQuery, please comment

[Gergely Risko]

On Tue, 18 Mar 2014 16:48:10 +0000, Brandon Allbery <ballbery@sinenomine.net> writes:

> On Tue, 2014-03-18 at 17:40 +0100, Gergely Risko wrote:
>> But then our only option left is to check for the realm, right?  I mean
>> without introducing a ptserver ubik client.
>
> You still cannot check for users who have a local Kerberos identity but
> no AFS identity; the only way to do that is via the ptserver.

Right.

Two levels for now: administrator only or anyuser?

Gergely