Excerpts from mail: 17-Nov-94 Re: ACL cell setup question..
[EMAIL PROTECTED] (472)
> > My question is, if the afs binaries are under /afs (as transarc tell
> > us to do), how could package access them unless all ACL are open for
> > system:anyuser (as transarc tell us no to do)?
> My recommendation is to use IP address acls. This way you can make
> your files readable by any host on your site, but not anywhere else.
> This way, in effect, you can have system:anyuser access as far as
> users go, but only the hosts at your site will have any access.
> -derek
Warning: IP addresses on ACLs don't work on SGIs, they're suspect under
Solaris 2, and there is no similar functionality under DCE/DFS in case
you want to migrate someday. I wish Transarc would either give this
feature first-class support or come up with an alternative.
Thanks,
Keith Gorlen
Division of Computer Research and Technology
National Institutes of Health
Building 12A, Room 2033
12 SOUTH DR MSC 5624
BETHESDA MD 20892-5624
Phone: (301) 496-1111, FAX: (301) 402-2867
Internet: [EMAIL PROTECTED]