[OpenAFS] Re: OpenAFS and AD trusts
Russ Allbery
rra@stanford.edu
Mon, 11 Jul 2011 17:49:40 -0700
Jeffrey Altman <jaltman@secure-endpoints.com> writes:
> What you want to accomplish is fine but all of your users will be
> foreign identities in the AFS Protection database.
> john@iu.edu
> jane@school1.edu
> jack@school2.edu
> etc and you need to add groups for foreign realms
> (system:authuser@FOREIGN.REALM) for each realm that you want to accept
> users from.
Ah, yes, that's right, that works too.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>