> Kerberos 5 has provisions for delegating rights for this sort of thing.
> Also, we've implemented a third-party authentication scheme for use on
> file protocol translators that does something similar. It's described
> in a CITI tech report. I can look up the ref and provide an online
> copy if anyone's interested.
I'm interested and would very much appreciate an online copy.
Regards,
Johan Ihren, <[EMAIL PROTECTED]>, Center for Parallel Computers,
Royal Institute of Technology, S-100 44 Stockholm, Sweden