[OpenAFS] system:authuser and cross realms

Derrick J Brashear shadow@dementia.org
Thu, 4 Jul 2002 13:12:30 -0400 (EDT)


On Thu, 4 Jul 2002, Gunnar Gunnarsson wrote:

> I thought that if I have a cross relation to other realms ( sharing a common key ) 
> then they would be accepted as system:authuser in my realm. Apperently it dosn't work
> like that. How can I accept those tokens as system:authuser in my cell and use them
> in acl and groups.

you can't. you can create system:authuser@other.realm as a group in your
realm, and things can create themselves as members of that (as long as you
give system:authuser@other.realm a high enough group quota) and then you
can add that to ACLs, but that's as close as you can get