From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <df49a7370810210025gb5afcb6m802a8337ef2982cf@mail.gmail.com>
Date: Tue, 21 Oct 2008 08:25:37 +0100
From: "roger peppe" <rogpeppe@gmail.com>
To: "Fans of the OS Plan 9 from Bell Labs" <9fans@9fans.net>
In-Reply-To: <a4e6962a0810202029k71aeaf0fxddfbc065d4b1f0bb@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <476c0463b6a73667d50ba792ef1ada3d@quanstro.net>
	<a4e6962a0810202029k71aeaf0fxddfbc065d4b1f0bb@mail.gmail.com>
Subject: Re: [9fans] Multi-domain authentication?
Topicbox-Message-UUID: 235a0154-ead4-11e9-9d60-3106f5b1d025

On Tue, Oct 21, 2008 at 4:29 AM, Eric Van Hensbergen <ericvh@gmail.com> wrote:
> Good general problem, I'd also like to add my personal pain point that
> only the file server knows about the relationship between groups and
> users.  It'd be nice to have a more general service to take care of
> this, and include some ability to assign remote delegated user names
> to local groups.

this would indeed be nice.

i believe some of the stuff that forsyth was working on at one time
to put SPKI into inferno could have helped in this context.