>What happens when we migrate to DCE/DFS? I've heard that under DCE,
>machines are objects that can authenticate themselves. Can such
machine >objects be given access rights on DFS ACLs? If so, it seems
that this is the >logical mapping for those of us who are using IP
addresses on ACLs to control >access to licensed software under AFS.
Would the DCE equivalent of >system:authuser (if there even is such a
thing) include authenticated >machines? If so, perhaps AFS IP addresses
on ACLs should behave the same.
Under DCE/DFS machines do have their own principals, with keys that are
stored in a protected dir on the local disk. These machines appear
"authenticated", just like any other user, although their user names are
things like "hosts/milkyway/self". There is an equivalent of authuser
in DCE, and these machines would be members of that group.
Mike
