Re: multimple domain authentication

Micah Stetson <[email protected]> Wed, 1 Sep 2004 14:08:36 -0700
Newsgroups gmane.os.plan9.nine-grid
Message-ID <20040901210836.GB24627@epaphras>
> /lib/ndb/auth expands to hold information about authentication domains
> we can allow in, something like:
> 
> 	friendlyauth=plan9.ucalgary.ca
> 		uid=!bootes uid=!someoneidontlike uid=*
> 
> doable?

If you want to provide access to a file server like
fossil, doesn't it have to have some notion of this as
well? How do I say, "Every user from LANL and UCalgary
is in the 'grid' group, and users from other (unspecified)
domains the auth server trusts automatically end up in
the 'noworld' group."?  Presumably, a different syntax
for /adm/users.  Or perhaps group membership needs to be
moved into the auth server as well.

Micah