This is a summary of the responses I recevied to the question "Is there a
package for AFS that will allow cell administration authority to be
delegated/partitioned/distributed within the cell?"
First, thank you very much to everyone who replied. In all, I received 13
responses.
Potential solutions include:
* ADM. Current version is 040 (April 1998) and it is available from
ftp://ftp.andrew.cmu.edu/pub/adm
It is still being used at CMU. Is is also being used at the University
of Maryland, and it is the current solution that we are using at LS&A
at the University of Michigan. Some documentation on the University of
Maryland solution is available at
http://www.glue.umd.edu/admin/afsserver.html#USADM
* Sysctl. sysctl is a free package from the IBM T.J Watson Research Center
for remote administration of workstations. It includes some code for
AFS administration. It can be obtained from
/afs/nada.kth.se/src/packages/sysctl
but the version there (which is the most recent I found) is from 1993 and
does not support Solaris.
* ksu is a standard part of Kerberos and can be restricted so that a user
can only run a certain set of commands using the ticket that it grants
them.
* Have a separate cell for each group/department.
* Switch to DFS. (I'm unclear on how this would help, but maybe I just
don't know enough about DFS administration).
* At least two people are thinking or have started writing in-house
solutions. There are also several sites that have their own solutions
in place that are specific to their environments: Jeeves, developed at
the School of Computer Science at CMU (contact Jeffrey T. Hutzelman,
[EMAIL PROTECTED]), one at the University of Manchester, and there are
rumors of a tool that was written at Intel.
The College of Literature, Science, and the Arts at the University of
Michigan has not decided which solution(s) might be right for it yet.
Likely candidates include ADM and an in-house solution, although we will
also take a look at Sysctl.
Special thanks to Walter Wong, Jim Kenyon, Marcus Watts, Kevin Hildebrand,
Kathy Penn, and Jeffrey Hutzelman.
Mark Montague
LS&A System Services Team
[EMAIL PROTECTED]
