[OpenAFS] renaming principals

Kim Kimball dhk@ccre.com
Tue, 08 May 2007 07:57:28 -0700


Yes, of course you're right.  'pts rename' as pointed out elsewhere is 
the correct approach.

Glad I didn't follow my own post :-!

Russ Allbery wrote:
> Kim Kimball <dhk@ccre.com> writes:
>
>   
>> I'm missing something WRT to Open AFS ACL changes.
>>     
>
>   
>> Why not delete the PTS user entry "unmarriedname" and create the new PTS
>> entry "marriedname" with the same PTS ID?
>>     
>
>   
>> ACLs store numeric PTSID; next time ACL entry is resolved the new name
>> will appear, retrieved from PTS DB.
>>     
>
>   
>> Unless we're talking about non-AFS ACLs.
>>     
>
> You lose all group membership when you delete the PTS ID, but that will
> preserve most AFS disk ACLs.  (It's possible that if you're really not
> lucky something will garbage-collect the numeric ACL, but probably not.)
>
>