[OpenAFS] Re: AFS and Windows PAC data still and issue?
John W. Sopko Jr.
Fri, 27 Jul 2007 14:27:28 -0400
So if a user principal is in many groups and exceeds 12k
this will be a problem?
Jeffrey Altman wrote:
> John W. Sopko Jr. wrote:
>> The afs/cell.name service principal only belongs to the standard
>> "domain users" group, (I think this is standard), and I do not believe
>> the afs service principal will need to be in any other groups. Thus
>> the PAC data for the service principal should not be growing. And as
>> long as it is less then 12k this should not cause a problem,
>> sound correct? Thanks.
> The PAC doesn't contain the authorization data for the service.
> It contains the authorization data for the user.
John W. Sopko Jr. University of North Carolina
email: sopko AT cs.unc.edu Computer Science Dept., CB 3175
Phone: 919-962-1844 Sitterson Hall; Room 044
Fax: 919-962-1799 Chapel Hill, NC 27599-3175