[OpenAFS] Administrators with a slash

Ciprian Dorin Craciun ciprian.craciun@gmail.com
Mon, 4 Mar 2019 14:14:43 +0200


On Mon, Mar 4, 2019 at 3:35 AM Benjamin Kaduk <kaduk@mit.edu> wrote:
> > Perhaps the OpenAFS Quick Start UNIX chapters touching the Kerberos
> > integration (http://docs.openafs.org/QuickStartUnix/HDRWQ53.html)
> > should clearly state this issue with principals containing dots and
> > using at the same time instances (i.e. slashes)...
>
> Patches welcome!  (XML sources browseable at
> http://git.openafs.org/?p=openafs.git;a=tree;f=doc/xml/QuickStartUnix;h=9e4fbd3f23b81696d98b1fcb68519364fe365d3f;hb=HEAD
> ; preferred submissions are as gerrit changes (docs on that at
> https://wiki.openafs.org/devel/GitDevelopers/) but mailed patches and
> similar are fine.


I'll try to provide a patch to the documentation.

(I am aware that OpenAFS is an open-source, volunteer-based project,
thus I was not "demanding" the update.)  :)

However on the same subject, is there a document describing how one
should configure Kerberos (from MIT) to work flawlessly with OpenAFS?
(I've tried searching for such a document, but found none, and
moreover even "plain" Kerberos deployment tutorials are very
scarce...)



> > Moreover it's still unclear to me if in `pts createuser` I should use
> > the `username.admin` or `username/admin` variants?  (It lets me do
> > both, but I think only the former actually works.)  Could someone tell
> > me the "correct" syntax for OpenAFS usernames?
>
> You should pts createuser the username.admin variants.


I'll try to include this in that patch also.



> Of course, rxgk will let us use fancier names for things, so we'll have to
> get used to a whole new world order when that finishes landing...

Could you elaborate more on this?

Thanks,
Ciprian.