Re: multimple domain authentication
Micah Stetson <[email protected]> Wed, 1 Sep 2004 14:08:36 -0700
| Newsgroups | gmane.os.plan9.nine-grid |
|---|---|
| Message-ID | <20040901210836.GB24627@epaphras> |
> /lib/ndb/auth expands to hold information about authentication domains > we can allow in, something like: > > friendlyauth=plan9.ucalgary.ca > uid=!bootes uid=!someoneidontlike uid=* > > doable? If you want to provide access to a file server like fossil, doesn't it have to have some notion of this as well? How do I say, "Every user from LANL and UCalgary is in the 'grid' group, and users from other (unspecified) domains the auth server trusts automatically end up in the 'noworld' group."? Presumably, a different syntax for /adm/users. Or perhaps group membership needs to be moved into the auth server as well. Micah