On Wed, 9 Jan 2013 10:16:25 +0800 (CST) 杭友春 <[email protected]> wrote:
> fs setacl /afs system:anyuser rl > it tells me : > fs:You don't have the required access rights on '/afs' > I know I have no right.But how can I get the access right? You need to have AFS tokens as an AFS administrator. Run 'kinit' and 'aklog' before running 'fs setacl /afs system:anyuser rl'. Additionally: * /afs is usually a read-only volume; you need to make the permission change in the read-write volume and "vos release" it for it to become visible. * If the OpenAFS client is configured with dynroot, /afs is not backed by a volume and you can't set an ACL on it. You will need to switch off dynroot and create a real root.afs volume and populate it from your CellServDB. * Many of the things you do during initial cell setup can be done with auth disabled (bos running in noauth mode), but setting ACLs isn't one of them; you *must* have a valid token which grants "a" access. -- brandon s allbery kf8nh sine nomine associates [email protected] [email protected] unix, openafs, kerberos, infrastructure, xmonad http://sinenomine.net_______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
