[OpenAFS] Web Server and Tokens

[Derek Atkins]

It depends on your threat model.

You could set an IP ACL, or you could set up a cron job to give
you real tokens.  Either case means that someone who breaks into
your machine has the full priviledges of that "user".

-derek

"Victor" <victord@paid.com> writes:

> If I have apache running, does that mean that after 24 hours, it will not be
> able to get files from /afs/cell/www/htdocs/blah.html?
> 
> What about root's cron jobs? Will they also not be able to run?
> 
> Is the only soultion getting binaries with support of afs?
> 
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
       Derek Atkins
       Computer and Internet Security Consultant
       derek@ihtfp.com             www.ihtfp.com