[OpenAFS] AFS clients for OSX/Darwin

[Ben Poliakoff]

--EdRE1UL8d3mMOE6m
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Jeffrey Altman <jaltman@secure-endpoints.com> [20060422 10:52]:
> Ben Poliakoff wrote:
> > The second issue is big for "useability" by non command line types.
> > It's hard to pitch AFS as a general purpose technology if some of its
> > best features aren't readily accessible to end users.
>=20
> Improved interaction with the Finder will require changes to MacOSX.
> Apple knows what they need to do in Leopard to provide a good AFS
> experience.  Now we just have to wait to see what they implement.
> If your organization is using AFS with MacOSX, make sure that Apple
> knows it.

My organization isn't using AFS in production yet, but if we are to
adopt AFS we'll be doing so well before all of our users are on Leopard.
What sorts of features are the gatekeepers hoping for in Leopard?

> > Neither OpenAFS or Arla seem to have any sort of dynamic trigger for
> > "authentication upon access" (i.e. launching an authentication dialog
> > when accessing files under /afs).
>=20
> Forgetting the technical issues.  How would AFS know that I want to
> access a given path using an authenticated identity vs anonymously?
>=20
> In general this is handled by configuring the system to obtain the
> desired credentials at login.

Fair enough.

> > My Mac heavy institution is investigating the use of AFS as the primary
> > network file service for end users (replacing netatalk and samba).  With
> > the proper amount of love/funding Arla *or* OpenAFS for OSX could be
> > very pleasant for the end user!  The Windows OpenAFS client is really
> > excellent with regard to the aformentioned issues, it would be great for
> > the OSX client to get some feature parity.
>=20
> The Windows client has received more than two years of significant love
> and attention than MacOSX.  There are other organizations on this list
> who have developed local gui tools for managing credentials and
> configuration of AFS on the Mac.  I encourage organizations that wish
> to contribute code or developer time to coordinate with each and the
> OpenAFS gatekeepers.  When there is consensus on a generally useful
> tool we can decide to integrate it into a future development release.

Assuming my team can convince our organization to commit to AFS, we'd be
very interested in working with others to enrich the OSX client.

Ben

--EdRE1UL8d3mMOE6m
Content-Type: application/x-pkcs7-signature
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--EdRE1UL8d3mMOE6m--