Re: trusting multiple auth servers in the 9grid
David Presotto <[email protected]>
| Newsgroups | gmane.os.plan9.nine-grid |
|---|---|
| Message-ID | <[email protected]> |
to rsc and jmk. they jointly own it.
the dual domain thing has nothing to do with fossil. It's all just factotum.
You have to get both keys in. The only way I know how to do this is to
get them from a secstore. If the secstore is running on the same box,
then after starting the network and secstore you have to do in cpurc:
# get rid of the old factotum
unmount /srv/factotum /mnt
# start up a new one
auth/factotum -S
You could even do something like:
# grid fs
@{
rfork n
auth/factotum -S
fossil/fossil -f /dev/sdC0/grid
}&
which actually starts the file server running with its own factotum so
that it could have different keys than the factotum serving the system.
One could do something similar for the listeners to that you could start
up cpu listeners for the grid running with their own factotum. We'll
have to experiment a bit to see what works best.