Re: [OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-14 Thread Derek Atkins
acemi <[EMAIL PROTECTED]> writes: > Any suggestions? Encrypt your data files and put the decryption routines in the application? Seriously, with what you've told us it sounds like you're trying to implement some sort of DRM solution. DRM solutions don't work in software. It's all just a matter

Re: [OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-14 Thread acemi
Hi Jeffrey, > In addition, before the > RUNAS session can access to non-system:anyuser areas of AFS, > it will need to obtain an AFS token that will in turn also > require a username and password. I think to start AFS session in RunAS session. So I don't need to obtain an AFS token before the Ru

Re: [OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-13 Thread Jeffrey Altman
Unfortunately your security model does not match that of AFS. You can RUNAS a user other than the logged in user, but the person executing the RUNAS will need to know a valid username and password for a Windows account. In addition, before the RUNAS session can access to non-system:anyuser areas

Re: [OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-13 Thread acemi
Jeffrey and Frank thank you for your quick replies > AFAIK this is not possible but why would you want to do that? It's > "Security throug Oscurity" (aka "The Windows Way" ;-) ). > A wise man once said, "Security through obscurity is worse than no > security at all". I want that my windows use

Re: [OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-13 Thread Jeffrey Hutzelman
On Tuesday, September 13, 2005 16:10:35 +0300 acemi <[EMAIL PROTECTED]> wrote: Hello, I want that users can't browse the directory's content (files list) but they can open/read a file if they know the name of the file. To do that I set r-l (read permission but no lookup permision) as ACL, b

Re: [OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-13 Thread Frank Burkhardt
Hi, On Tue, Sep 13, 2005 at 04:10:35PM +0300, acemi wrote: > Hello, > > I want that users can't browse the directory's content (files list) but > they can open/read a file if they know the name of the file. To do that > I set r-l (read permission but no lookup permision) as ACL, but user > can

[OpenAFS] To read a file from a directory whose ACL is r-l (read permission but no lookup permission)

2005-09-13 Thread acemi
Hello, I want that users can't browse the directory's content (files list) but they can open/read a file if they know the name of the file. To do that I set r-l (read permission but no lookup permision) as ACL, but user can't read the file in this case. I googled to learn how I can do but I