[OpenAFS] Re: other-realm groups in ACLs?
Adam Megacz
megacz@cs.berkeley.edu
Mon, 17 Mar 2008 13:17:56 -0700
Jeffrey Altman <jaltman@columbia.edu> writes:
> Please clarify what you are asking. Are you asking if you can use
> the group definitions from cell A on ACLs in cell B?
Yes.
"Derrick Brashear" <shadow@gmail.com> writes:
> No. And my server has no creds to do a lookup in your realm
Sorry, I should have indicated that I was assuming a cross-realm trust
between the "home" kerberos realms of the two cells.
> (and it could be hazardous if i lost contact with you)
Ah, very good point. Now I see why this isn't practical.
- a