[OpenAFS] Re: foreign-realm members of system:administrators have weakened powers?

Russ Allbery rra@stanford.edu
Thu, 26 Jan 2006 21:41:06 -0800


Adam Megacz <megacz@cs.berkeley.edu> writes:

> I may be abandoning this because there doesn't seem to be any reliable
> way for clients to figure out that the cell is its own realm (without
> requiring end-users to manually edit or replace their krb5.conf, which
> is way beyond the abilities of many people, sad as that fact may be).

Doesn't manipulating the names of the VLDB servers help?  Or does Berkeley
not want to let you create an additional level in DNS?

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>