[OpenAFS] Re: AFS and Windows PAC data still and issue?

[John W. Sopko Jr.]

So if a user principal is in many groups and exceeds 12k
this will be a problem?

Jeffrey Altman wrote:
> John W. Sopko Jr. wrote:
> 
>> The afs/cell.name service principal only belongs to the standard
>> "domain users" group, (I think this is standard), and I do not believe
>> the afs service principal will need to be in any other groups. Thus
>> the PAC data for the service principal should not be growing. And as
>> long as it is less then 12k this should not cause a problem,
>> sound correct? Thanks.
> 
> The PAC doesn't contain the authorization data for the service.
> It contains the authorization data for the user.
> 
> 

-- 
John W. Sopko Jr.               University of North Carolina
email: sopko AT cs.unc.edu      Computer Science Dept., CB 3175
Phone: 919-962-1844             Sitterson Hall; Room 044
Fax:   919-962-1799             Chapel Hill, NC 27599-3175