trusting multiple auth servers in the 9grid
David Presotto <[email protected]>
| Newsgroups | gmane.os.plan9.nine-grid |
|---|---|
| Message-ID | <[email protected]> |
the problem we're trying to solve is: how do we boot a file server that trusts users from two authentication domains. for example i want to have my own set of university of calgary users, which do not necessarily need to know about 9grid, but i also would like to allow users known to the 9grid auth server(s) to come and play on my network. If you're using a fossil file server, that shouldn't be a problem. 1) The factotum on the machine it runs on needs to have p9sk1 accounts/passwords in both domains 2) It should (if you want to do anything else) also have in its /lib/ndb/local auth=<auth server for first domain> authdom=<name of first domain> auth=<auth server for second domain> authdom=<name of second domain> If this doesn't work, tell me and I'll fix it. Factotum is supposed to allow this though I haven't tried it since rsc's last rewrite.