[OpenAFS] Re: refuse to grant tokens to a process without a PAG?
Sat, 17 Mar 2007 12:06:34 -0700
Related question: if a given process has a PAG, is it possible for it
to spawn a process with "no PAG" (ie tokens get associated to the
userid, not a PAG)?
Derrick J Brashear <firstname.lastname@example.org> writes:
> Not currently
> On Fri, 16 Mar 2007, Adam Megacz wrote:
>> Is there any option for the OpenAFS client that will cause it to
>> refuse to associate tokens with a userid (rather than a PAG)?
>> This is the default behavior when aklog is invoked outside of a PAG --
>> any tokens get associated with all processes under that userid which
>> do not have a PAG. I'm wondering if there is a way to simply refuse
>> to offer tokens in this case -- force the user to get into a PAG
>> before letting them get tokens.
>> - a
>> PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380
>> OpenAFS-info mailing list
PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380