Next: Update control Up: Security issues Previous: Access control lists

Account aliases

In addition to the above protection, catalogue entries may only be deleted by users whose account matches that of the catalogue entry. However, as shown in the following example, accounts are often not common across different systems.

FM> ls -o                                                                   
 
 Directory: //CERN/CNDIV/TAPES
 
 Generic filename: XTRACE91
 Created by:  JAMIE    ACCT: JDS$CT   on node: CERNVM   by job: JAMIE   
 
 Generic filename: XTRACE92
 Created by:  jamie    ACCT: JDSCT    on node: zfatal   by job: jamie-15

To cater for this situation, account aliasing is possible. An alias file, FATMEN.ACCOUNTS, consists of 2 fields.

Account name
List of aliases

Note that this scheme is not designed for large numbers of users with different accounts on each machine. It is intended for use by a small number of production managers.

Example of an account alias file

EMC$XV=CCA$XV,PRO$XV                                                            
CCA$XV=EMC$XV,PRO$XV                                                            
PRO$XV=CCA$XV,EMC$XV

Janne Saarela
Mon May 15 09:59:59 METDST 1995