If one is running the kerberos authentication scheme then it should be
possible to generate a token from the local srvtab on a server for say
rcmd.machinename. Assuming that the srvtab is secure (you would want
that for such purposes), you can then make your code generate a token
as necessary and write to your central mail spool.... (provided the acl
is right).
BTW: Do you really want a central mail spool for AFS? Didn't CMU have
problems with AMS because that all machines were looking at one common
directory (which got updated frequently as well) which generates tons of
callbacks? If so, then central "/usr/spool/mail" would probably also
suffer from this at large sites and other forms of mail delivery should
be examined using the POP protocol, or any other scheme...
Ezra Peisach
