Brian W. Spolarich <[EMAIL PROTECTED]> wrote:
> On Tue, 8 Feb 2000, Dave Lorand wrote:
>
> | We want to mirror a web site, but our web pages are all stored in AFS.
> | So, I suppose I need to give AFS tokens to either a daemon or a cron
> | job to do the mirroring. How is this usually done?
>
> Use IP ACLs. That way you don't need to get a token.
>
> pts createuser 111.222.33.44
> pts adduser 111.222.33.44 some:group
> fs setacl /afs/foo.org/some/path some:group write
>
> This would permit any process running on host with IP address
> 111.222.33.44 to write to the directory /afs/foo.org/some/path/.
Yeah, we do that already with our web server, but I'm not sure I can
scare up a machine without ordinary users which could do it (obviously
giving a normal user machine write access to our web space would be a
Bad Thing (tm)).
Anyway, thanks for reminding me of this option, but I'd really like to
see if there's another way.
Regards,
Dave
____________________________________________________________
| Dave Lorand, System Administrator | [EMAIL PROTECTED] |
| Social Science Research Computing | 773-702-3792 |
| University of Chicago | 773-702-2101 (fax) |
+-----------------------------------+------------------------+
PGP key: http://www.src.uchicago.edu/users/davel/key.txt