Hello, info-afs members,
The College of Literature, Science and the Arts at the University of
Michigan would like to find out if anyone using AFS is aware of software
that will permit "distributed administration" of AFS. AFS, out-of-the-box,
allows all-or-nothing delegation of authority: either someone has the
authority to administer some aspect of AFS for the entire AFS cell or they
do not have the ability to do it for any of the AFS cell.
We are looking for a solution that will let us delegate authority on a
department-by-department basis so that we can, for example, give an
administrator in the Department of Physics full rights to manipluate
user accounts and AFS volumes, BUT only if they belong to Physics. We
would like to ensure that the AFS administrator in Physics cannot accidently
damage resources belonging to other departments, such as Economics or
Mathematics.
We are aware of a package called ADM written at Carnegie Mellon University
that will permit this. The problem is that it does not appear to be
developed or maintained anymore -- the version we have is 0.36 from August
1995. Can anyone suggest alternatives? We are prepared to write our own
solution, but want to be sure that we are not re-inventing the wheel before
we begin.
Thanks for any help you can provide. If anyone is interested in a summary
of what I find out, let me know and I will send you one or post one to
the info-afs mailing list.
Mark Montague
Unix Infrastructure Lead
LS&A System Services Team
[EMAIL PROTECTED]
