[[!meta title="SIPB AFS-Moira Synchronizer"]]
The SIPB AFS-Moira Synchronizer allows SIPB cell AFS groups to be
automatically synchronized with a related Moira group by adding the
Moira list to the Moira list sipb-afs-sync. In theory,
this should eliminate most of the need to contact
sipb-afsreq in order to control ACLs for SIPB project
lockers (requests to sipb-afsreq are still necessary to get
new lockers created).
## Usage
Suppose you have a Moira list super-project that you
want synchronized with the sipb.mit.edu cell so that you
can use it as the ACL in the sipb.mit.edu AFS cell. To set
it up to by synchronized, you first need to make sure that
super-project is flagged as an AFS group in Moira (so that
there is a corresponding athena.mit.edu cell group), and
add super-project to the sipb-afs-sync list, as
follows:
blanche super-project -G
blanche sipb-afs-sync -a super-project
The membership of the AFS group system:super-project
will then be copied from the athena.mit.edu cell into the
sipb.mit.edu cell, creating the group if necessary, and
creating sipb cell PTS entries for any Kerberos principals as
necessary.
Currently, the synchronization is run in a cron job that updates
every 15 minutes. Certain special groups (like
system:administrators) are in a blacklist that will not be
synchronized. If you want to change the blacklist status of a
group, contact sipb-afsreq.
Maintainers: tabbott, nelhage