[OpenAFS] Re: Supergroups and ACL inheritance

Thomas Smith theitsmith@gmail.com
Fri, 25 Feb 2011 14:30:16 -0700


--001636af017b3dde2b049d220919
Content-Type: text/plain; charset=ISO-8859-1

On Fri, Feb 25, 2011 at 6:16 AM, Todd Lewis <utoddl@email.unc.edu> wrote:

>
>
> On 02/25/2011 12:11 AM, Andrew Deason wrote:
>
>> On Thu, 24 Feb 2011 18:01:10 -0700
>> Thomas Smith<theitsmith@gmail.com>  wrote:
>>
>>  Groups:
>>> * group0 - The primary group for office location "group0".
>>> * group0:admins - Office administrations for "group0".
>>>
>>
> One more point of confusion to consider: Your group memberships are checked
> when you get your AFS token. If you're making changes to group memberships,
> I believe you won't pick up the changes until you get new tokens.


Good point. I knew that Kerberos worked this way, but I hadn't considered
that AFS tokens work the same.

Thank you.

--001636af017b3dde2b049d220919
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div class=3D"gmail_quote">On Fri, Feb 25, 2011 at 6:16 AM, Todd Lewis <spa=
n dir=3D"ltr">&lt;<a href=3D"mailto:utoddl@email.unc.edu">utoddl@email.unc.=
edu</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"mar=
gin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-=
left: 1ex;">
<div class=3D"im"><br>
<br>
On 02/25/2011 12:11 AM, Andrew Deason wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
On Thu, 24 Feb 2011 18:01:10 -0700<br>
Thomas Smith&lt;<a href=3D"mailto:theitsmith@gmail.com" target=3D"_blank">t=
heitsmith@gmail.com</a>&gt; =A0wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Groups:<br>
* group0 - The primary group for office location &quot;group0&quot;.<br>
* group0:admins - Office administrations for &quot;group0&quot;.<br>
</blockquote></blockquote>
<br></div>
One more point of confusion to consider: Your group memberships are checked=
 when you get your AFS token. If you&#39;re making changes to group members=
hips, I believe you won&#39;t pick up the changes until you get new tokens.=
</blockquote>
<div><br>Good point. I knew that Kerberos worked this way, but I hadn&#39;t=
 considered that AFS tokens work the same.<br> <br>Thank you.</div></div>

--001636af017b3dde2b049d220919--