[cups.general] Strange kerberos problem [solved]

[Brandon S. Allbery KF8NH]

On Jan 29, 2008, at 18:42 , John Hodrien wrote:

> On Tue, 29 Jan 2008, Brandon S. Allbery KF8NH wrote:
>
>> Oh, I should also mention that Microsoft has reason for larger group
>> information:  Unix groups are binary member-or-not, whereas Windows
>> groups are true ACLs.  They're not really comparable.
>
> In terms of what makes it into the ticket, what's the difference?
>
> I, possibly dimly, thought the concepts matched resonably well.   
> With Windows
> groups, are you not simply in or out?

No, because it expands to a list of permissions:  "user allowed to do  
X, prohibited from Y, ..."  I'm under the strong impression that (or  
an encrypted version thereof) ends up in the PAC, which is why the  
ticket is so large.

-- 
brandon s. allbery [solaris,freebsd,perl,pugs,haskell] allbery at kf8nh.com
system administrator [openafs,heimdal,too many hats] allbery at ece.cmu.edu
electrical and computer engineering, carnegie mellon university    KF8NH