[OpenAFS] Re: refuse to grant tokens to a process without a PAG?

Adam Megacz megacz@cs.berkeley.edu
Sat, 17 Mar 2007 12:06:34 -0700


Related question: if a given process has a PAG, is it possible for it
to spawn a process with "no PAG" (ie tokens get associated to the
userid, not a PAG)?

  - a

Derrick J Brashear <shadow@dementia.org> writes:
> Not currently
>
> On Fri, 16 Mar 2007, Adam Megacz wrote:
>
>>
>> Is there any option for the OpenAFS client that will cause it to
>> refuse to associate tokens with a userid (rather than a PAG)?
>>
>> This is the default behavior when aklog is invoked outside of a PAG --
>> any tokens get associated with all processes under that userid which
>> do not have a PAG.  I'm wondering if there is a way to simply refuse
>> to offer tokens in this case -- force the user to get into a PAG
>> before letting them get tokens.
>>
>>  - a
>>
>> -- 
>> PGP/GPG: 5C9F F366 C9CF 2145 E770  B1B8 EFB1 462D A146 C380
>>
>> _______________________________________________
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>

-- 
PGP/GPG: 5C9F F366 C9CF 2145 E770  B1B8 EFB1 462D A146 C380