the openafs 1.5 development branch now has code to do such a thing. it uses the session keyring to carry a pag key across the process boundary. we have considered writing a kernel module to just implement a "pag api" that would be generic for use by others.
In message <[EMAIL PROTECTED]>,"C. Alex. North-Keys" writes: >Is there anyone working on a PAG system that doesn't squat in the group >ID space? Several sites (ours included) have seen failures relating to >the use of group permissions when numeric groups in the auxilliary group >ID list cannot be mapped back to group names, even on files outside of >the AFS space. _______________________________________________ OpenAFS-devel mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-devel
