From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <476c0463b6a73667d50ba792ef1ada3d@quanstro.net>
From: erik quanstrom <quanstro@quanstro.net>
Date: Mon, 20 Oct 2008 20:49:12 -0400
To: mirtchovski@gmail.com, 9fans@9fans.net
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Subject: Re: [9fans] Multi-domain authentication?
Topicbox-Message-UUID: 233c272e-ead4-11e9-9d60-3106f5b1d025

On Mon Oct 20 20:41:38 EDT 2008, mirtchovski@gmail.com wrote:
> > what kind of access would you give such users to the fileserver?
>
> in this specific example perhaps some minimal scratch space, but one
> can quickly conceive cases where the complete file system semantics
> are used, for example when you want to provide a data replication
> service between sites without enforcing a global user namespace.
>
> was this what you were asking? some of those ideas came out of 9grid,
> but i don't know whether anyone has pushed them further.

i'm not sure.  what does "complete filesystem semantics" mean?  let me
rephrase.

the premise is that the local system, and thus i assume the local fs, has
no knowledge of the user.  this task has been delegated to a foreign auth
server.  so what are the mechanics of getting the local fs to treat an
unknown user as something other than none?

supposing this problem is solved, don't you need quotas or something
if you don't know who exactly to yell at for filling up the worm?

- erik