>> > A PAG is nothing more or less than a group membership, from the
> Have you looked at libjuafs? With libjuafs you could use > afs_setpag_val() to bind cached creds to your worker threads as Okay, now I'm a bit confused. The comment for afs_setpag_val() specifically refers to the calling *thread*, not process, which would imply that in this case a PAG can be more fine-grained than setgid() -- the kernel uses more than just the process GID to figure out which tokens it can use. Or is this what the AFS_WEB_ENHANCEMENTS thing is? I never figured out exactly what that meant, but I guess it would make sense if AFS_WEB_ENHANCEMENTS meant "track PAGs using threads instead of process GIDs"? - a _______________________________________________ OpenAFS-devel mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-devel
