On Wed, Dec 12, 2012 at 6:44 AM, Michal Švamberg <[email protected]> wrote:
> > Is there some reasonable advice, how to separate virtual web > servers on AFS from each others? > > The only way to accomplish this is to have each subprocess that requires write access run with it's own afs token and only allow write access by that token. This problem has been solved, but it's not simple. I think at a minimum you'll need a "cgi" server in addition to your main server. You'll also need to manage keytabs for each of the cms servers. Stanford has done this, but it's been so long I've forgotten the exact details. http://itservices.stanford.edu/service/cgi/personal - Booker C. Bense
