[OpenAFS] groups in groups, ptsviewers etc...

Anders Magnusson ragge@ltu.se
Tue, 18 Mar 2008 14:36:22 +0100


Marcus Watts wrote:
>> Also, for people to be able to see what's in the protection database, 
>> they must obviously be members
>> of the (undocumented?) ptsviewers group. Is it safe just to add all 
>> people to this group or are there other
>> implications of doing so?
>>     
>
> Depends on if you ever want private groups or not.
>
> If you want everybody in your cell to be able to see group
> membership by default, you're probably better off running ptserver this way:
> 	/usr/afs/bin/ptserver -p 16 -default SOM-- SOM--
> probably you will need to remake your ptserver instances in bos to do this.
>   
As a follow-up to this question, is there a way to allow users to list 
the pts entries in some way?

% pts listentries -groups seems to require that the user belongs to 
system:administrators.

-- Ragge