Hi Dirk,
1) For users home directories in AFS, is it save to remove
system:administrators from the ACLs (the users have rlidwka on their
$HOME)?
there is no problem removing system:administrators from acls, this can
be added from members of system:administrators again with no problems.
Afaik it is not possible to lock out administrators.
2) I currently have /afs and /afs/<mydomain> owned by root:root, but
i.e. /afs/<mydomain>/data is owned by afsadm:afs (150:150), afsadm being a
member of system:administrators. Is it ok to have /afs (the volume, not the
mount point) and /afs/<mydomain> be owned by afsadm:afs?
I do not see any problems regarding the ownership of these directories,
acl's are the important point.
Thanx...
Hopy, i could help.
Dirk
Klaas
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
