[OpenAFS] Re: other-realm groups in ACLs?

[Adam Megacz]

Jeffrey Altman <jaltman@columbia.edu> writes:
> Please clarify what you are asking.  Are you asking if you can use
> the group definitions from cell A on ACLs in cell B?

Yes.

"Derrick Brashear" <shadow@gmail.com> writes:
> No. And my server has no creds to do a lookup in your realm

Sorry, I should have indicated that I was assuming a cross-realm trust
between the "home" kerberos realms of the two cells.

> (and it could be hazardous if i lost contact with you)

Ah, very good point.  Now I see why this isn't practical.

  - a