[OpenAFS] Re: Supergroups and ACL inheritance
Thomas Smith
theitsmith@gmail.com
Fri, 25 Feb 2011 14:30:16 -0700
--001636af017b3dde2b049d220919
Content-Type: text/plain; charset=ISO-8859-1
On Fri, Feb 25, 2011 at 6:16 AM, Todd Lewis <utoddl@email.unc.edu> wrote:
>
>
> On 02/25/2011 12:11 AM, Andrew Deason wrote:
>
>> On Thu, 24 Feb 2011 18:01:10 -0700
>> Thomas Smith<theitsmith@gmail.com> wrote:
>>
>> Groups:
>>> * group0 - The primary group for office location "group0".
>>> * group0:admins - Office administrations for "group0".
>>>
>>
> One more point of confusion to consider: Your group memberships are checked
> when you get your AFS token. If you're making changes to group memberships,
> I believe you won't pick up the changes until you get new tokens.
Good point. I knew that Kerberos worked this way, but I hadn't considered
that AFS tokens work the same.
Thank you.
--001636af017b3dde2b049d220919
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div class=3D"gmail_quote">On Fri, Feb 25, 2011 at 6:16 AM, Todd Lewis <spa=
n dir=3D"ltr"><<a href=3D"mailto:utoddl@email.unc.edu">utoddl@email.unc.=
edu</a>></span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"mar=
gin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-=
left: 1ex;">
<div class=3D"im"><br>
<br>
On 02/25/2011 12:11 AM, Andrew Deason wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
On Thu, 24 Feb 2011 18:01:10 -0700<br>
Thomas Smith<<a href=3D"mailto:theitsmith@gmail.com" target=3D"_blank">t=
heitsmith@gmail.com</a>> =A0wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Groups:<br>
* group0 - The primary group for office location "group0".<br>
* group0:admins - Office administrations for "group0".<br>
</blockquote></blockquote>
<br></div>
One more point of confusion to consider: Your group memberships are checked=
when you get your AFS token. If you're making changes to group members=
hips, I believe you won't pick up the changes until you get new tokens.=
</blockquote>
<div><br>Good point. I knew that Kerberos worked this way, but I hadn't=
considered that AFS tokens work the same.<br> <br>Thank you.</div></div>
--001636af017b3dde2b049d220919--