Eric Chris Garrison wrote:
Hello,

There is a group that wants to store data in our AFS cell, but they want
to supply their own fileserver so they can buy disk for it as needed,
rather than asking us to buy more.

What dangers might there be in doing this?  Is there any administrative
access they would need to run it that they should not have?

Any pointers toward docs that deal with a strange case like this would be
very much appreciated!

Thanks,

Chris

If they want administrative control over their own file server, give
them their own cell.  A file server shares the AFS key with every other
AFS server.  Therefore, giving them their own server gives them
control over the entire cell.

If they have their own cell, they can share the same Kerberos realm
as the existing cell.   Of course, the downside is that they give
up replication of the databases and the ability to move volumes to
other servers when the machine needs to be taken down for maintenance.

Jeffrey Altman

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to