X-Git-Url: https://sipb.mit.edu/gitweb.cgi/wiki.git/blobdiff_plain/537314853f3a4cfc77e68bc74eddcd6921bb5a7e..55f343a3c05527a2826a6f3b467ab3d93db2dcf5:/projects/sipb-afs-sync.mdwn
diff --git a/projects/sipb-afs-sync.mdwn b/projects/sipb-afs-sync.mdwn
index 2ec7462..e31b600 100644
--- a/projects/sipb-afs-sync.mdwn
+++ b/projects/sipb-afs-sync.mdwn
@@ -6,7 +6,8 @@
this should eliminate most of the need to contact
sipb-afsreq in order to control ACLs for SIPB project
lockers (requests to sipb-afsreq are still necessary to get
- new lockers created).
+ new lockers created, and to add new lists to the sipb-afs-sync
+ list).
## Usage
Suppose you have a Moira list super-project that you
@@ -14,20 +15,25 @@
can use it as the ACL in the sipb.mit.edu AFS cell. To set
it up to by synchronized, you first need to make sure that
super-project is flagged as an AFS group in Moira (so that
- there is a corresponding athena.mit.edu cell group), and
- add super-project to the sipb-afs-sync list, as
+ there is a corresponding athena.mit.edu cell group), as
follows:
blanche super-project -G
+
+ Then if a SIPB AFS administrator (e.g., e-mail sipb-afsreq)
+ adds super-project to the sipb-afs-sync list, as
+ follows:
+
blanche sipb-afs-sync -a super-project
- The membership of the AFS group system:super-project
+ the membership of the AFS group system:super-project
will then be copied from the athena.mit.edu cell into the
sipb.mit.edu cell, creating the group if necessary, and
creating sipb cell PTS entries for any Kerberos principals as
- necessary.
+ necessary. The sipb cell group will be kept up-to-date with
+ changes to the athena one.
- Currently, the synchronization is run in a cron job that updates
+ Currently, the synchronization is run in a cron job on rc that updates
every 15 minutes. Certain special groups (like
system:administrators) are in a blacklist that will not be
synchronized. If you want to change the blacklist status of a