The axscache stores cached access rights, which are applied based on the identity (credentials) of the process, no? To get the identity of the process just search the keyrings with the standard API for an OpenAFS token. Take the token it finds, (The one in the most-local scope) and use it to check access.
The credential/token would be fine if we wanted to ask the fileserver for the access rights
every time, but we don't. We want to cache them. The cache needs a key. Right now, the key is the pag number (which is at least 0x41000000) if there is a pag, and the uid if not.
We could store a cache key in the keyring, but that would in fact be providing a "pag" concept that does not use groups. (which is fine, but it would have eliminated PAGs).
p7swgMPkiftJJ.p7s
Description: S/MIME cryptographic signature
