Bill Doster writes:
> Paul, I definitely agree that having large groups (1) and groups
> within groups (2) would make AFS even more powerful and flexible.

This is the real problem for large sites, that the current pt server
can't do either.  If it did, who'd care about system:authuser?

 > Since we offer services to non-University people, we really try to
 > discourage the use of the system:authuser pt group since it doesn't
 > really mean that the person is a member of the university (and therefore
 > should have access to software licensed only to members of the university).

Bill, do IP addresses in your pt server come through as system:authuser?

I also agree that system:authuser is not the best thing.  But when
trying to support real users, using real licensed applications, and
given the deficiencies in the current pt server, what's a site to do? 

Of course changing the code yourself is one option.  Another would be for
Transarc to implement the changes.  I would assume that since this hasn't
been done, Transarc is either working on it, or has already decided not to
do it, or is planning to do it in the future.  I don't know which,  (Joe?)

< Paul

Reply via email to