Re: [OpenAFS-devel] New subcommand for pts

[Sven Oehme]

Jeffrey Hutzelman <[EMAIL PROTECTED]> wrote on 14/02/2005 21:50:03:

>
>
> On Monday, February 14, 2005 08:02:27 PM +0100 Sven Oehme
> <[EMAIL PROTECTED]> wrote:
>
> > Hello,
> >
> > we have introduced a new subcommand for pts  ..
> >
> > it adds and removes a user to or from a list of given groups with one
> > command.
> > if the user doesn't exist, he creates the user and adds him into the
> > necessary groups .
> >
> > see some examples :
> >
> > localhost# pts help setgroups
> >
> > pts setgroups: Set a user into a fixed list of groups
> >
> > Usage: pts setgroups -user <user name>+ -group <group name>+ [-cell
> > <cell name>] [-noauth] [-force] [-help]
> > Where: -noauth  run unauthenticated
> >        -force   Continue oper despite reasonable errors
>
> This isn't really a basic operation, and given that the AFS architecture
> allows users to create and manage theor own groups, I wouldn't expect it to
> be a common operation, either.

yes and no, if you have to manage a huge amount of Users, because you have a central
administration for a very huge cell, this is something you need.

>
> It can't be done atomically, because the ptserver only provides interfaces
> to add or remove a single group membership for a single user at a time.
>
> Why does it belong in 'pts', instead of in a script?

yes that's true , and this is our problem, we have to fork a binary , authenticate, .... for each add or remove.
this takes to long in a script and we have run time problems updating a big number of changes in a bulk within a given time.
i think this is a function which makes live easier for admins in a big environment

>
> -- Jeff

Sven
-------------------------------------------------------------------------------------------------------------------------
Dept. A153,  STG/ISC EMEA AIS Strategy and Architecture
Development Leader Stonehenge
IBM intranet ---> http://w3.ais.mainz.de.ibm.com/stonehenge/
internet ---> http://www-5.ibm.com/services/de/storage/stonehenge.html
Phone (+49)-6131-84-3151
Fax      (+49)-6131-84-6708
Mobil   (+49)-171-970-6664
E-Mail : [EMAIL PROTECTED]