[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cups
Subject:    Re: [cups.general] Strange kerberos problem [solved]
From:       "Brandon S. Allbery KF8NH" <allbery () ece ! cmu ! edu>
Date:       2008-01-30 0:06:12
Message-ID: A11BB511-A253-4E0F-8ABB-C48CA003B7DC () ece ! cmu ! edu
[Download RAW message or body]


On Jan 29, 2008, at 18:42 , John Hodrien wrote:

> On Tue, 29 Jan 2008, Brandon S. Allbery KF8NH wrote:
>
>> Oh, I should also mention that Microsoft has reason for larger group
>> information:  Unix groups are binary member-or-not, whereas Windows
>> groups are true ACLs.  They're not really comparable.
>
> In terms of what makes it into the ticket, what's the difference?
>
> I, possibly dimly, thought the concepts matched resonably well.   
> With Windows
> groups, are you not simply in or out?

No, because it expands to a list of permissions:  "user allowed to do  
X, prohibited from Y, ..."  I'm under the strong impression that (or  
an encrypted version thereof) ends up in the PAC, which is why the  
ticket is so large.

-- 
brandon s. allbery [solaris,freebsd,perl,pugs,haskell] allbery@kf8nh.com
system administrator [openafs,heimdal,too many hats] allbery@ece.cmu.edu
electrical and computer engineering, carnegie mellon university    KF8NH


_______________________________________________
cups mailing list
cups@easysw.com
http://lists.easysw.com/mailman/listinfo/cups
[prev in list] [next in list] [prev in thread] [next in thread]