[OpenAFS] acl's and directories

Ron Croonenberg ronc@DePauw.edu
Mon, 7 Feb 2005 11:27:30 EST


Hello all,

I want to create student accounts in such a way that.

Every student has a homedirectory (for example) :  /home/ron

Then every student account needs a "classes" directory (for example):
/home/ron/classes

and everyone in the group instructors needs the rl permissions set for that one.

However when I don't give everyone in the instructors group at least l
permission in /etc/ron then still (even though they have rl in
/home/ron/classes) they get a "permission denied" when trying to access it.

Now the problem is that I can give the instructors the l permission in the
students homedirectory but then every directory the students create from their
homedirectory will have that instructors permission too.

Can what I want be done ?  basically give instructors permission in a
subdirectory but nowhere else ?

Same problem occurs with "public_html"  apache is running on a different system
that uses the afs client to get access to the user accounts public_html.
That means that "anyone" needs rl access to "public_html" and that only seems to
work when "anyone" has l access to that users homedirectory.

any sugestions ?

Ron

=================================================================
1879:
     Thomas Edison gets an idea, and his brother Timmy says,
     "Hey, what's that thing over your head?
=================================================================
 Ron Croonenberg               | Phone: 1 765 658 4761
 Technology Coordinator        | Fax:   1 765 658 4732
                               |
 Department of ComputerScience | e-mail : ronc@DePauw.edu
 DePauw University             |
 Julian Science & Math Center  |
 602 South College Ave.        |
 Greencastle, IN  46135        |
=================================================================
 http://www.depauw.edu/acad/computer/RonCroonenberg.asp
=================================================================