[OpenAFS] Re: Cross-realm access

[Benjamin Kaduk]

On Mon, 21 Jul 2014, Andrew Deason wrote:

> On Mon, 21 Jul 2014 16:16:50 +0200
> Jaap Winius <jwinius@umrk.nl> wrote:
>
>> Is there an easy way around this, like something equivalent to making
>> system:authuser@<MY_REALM> a member of system:authuser?
>
> No, but you might add system:authuser and system:authuser@realm to
> another group that you create (call it e.g. "everyone"). I don't
> remember off the top of my head if that's possible to do, since the
> system:authuser/system:anyuser groups are of course a bit special. But
> it's something to look into, if that sounds helpful.

It also requires supergroups to be enabled, which is not the default, 
IIRC.

-Ben