You can give the machine that the backup is running on a special ID
(as per a Kerberos srvtab) and then have the machine get tokens for
itself... That means you have to trust this special ID, which only
root on this machine can obtain, with system:administrator bits.
This does NOT mean that it has to be called "root". For example, we
have an ID in a cell here called "rcmd.ronald-ann", which is in the
system:administrators of one of the local cells for maintainance
purposes.
I hope this helps answer your question...
-derek
PGP 2 key available upon request on the key-server:
[EMAIL PROTECTED]
--
Derek Atkins, MIT '93, Electrical Engineering and Computer Science
Secretary, MIT Student Information Processing Board (SIPB)
MIT Media Laboratory, Speech Research Group
[EMAIL PROTECTED] PP-ASEL N1NWH