[OpenAFS] groups in groups, ptsviewers etc...

Wed, 19 Mar 2008 10:57:01 -0600

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
Marcus Watts wrote:
<blockquote cite="mid:2514815.1205833998747.JavaMail.root@m04"
 type="cite">
  <pre wrap="">Anders Magnusson <a class="moz-txt-link-rfc2396E" href="mailto:ragge@ltu.se">&lt;ragge@ltu.se&gt;</a> writes:
  </pre>
  <blockquote type="cite">
    <pre wrap="">Also, for people to be able to see what's in the protection database, 
they must obviously be members
of the (undocumented?) ptsviewers group. Is it safe just to add all 
people to this group or are there other
implications of doing so?
    </pre>
  </blockquote>
  <pre wrap=""><!---->
Depends on if you ever want private groups or not.

If you want everybody in your cell to be able to see group
membership by default, you're probably better off running ptserver this way:
	/usr/afs/bin/ptserver -p 16 -default SOM-- SOM--
probably you will need to remake your ptserver instances in bos to do this.

  </pre>
  <blockquote type="cite">
    <pre wrap="">-- Ragge
    </pre>
  </blockquote>
  <pre wrap=""><!---->
  </pre>
</blockquote>
<br>
The SOMAR (or "privacy") flags can also be set for individual groups
using "pts setfields" if you wish to allow operations on groups x y z
but not on the entire PTDB.<br>
<br>
<a href="http://www.openafs.org/pages/doc/UserGuide/auusg008.htm">http://www.openafs.org/pages/doc/UserGuide/auusg008.htm</a><br>
<br>
Look for "Protecting Group-related Information"<br>
<br>
Kim<br>
<br>
<br>
</body>
</html>