[H-GEN] Re: Overlapping directories-what do you think?

[Laurence J. Rietberg]

Frank,

At 02:43  8/09/98 -0500, you wrote:
>I would like to get the opinion of the group if this would
>work. This is in a prepress environment.
>
>We would like to setup a volume, call it /Share/jobs
>that has as a first layer customer directories. This
>would be the main volume used internally.
>
>Then, within that directory, we would like to have
>individual customer directories, call it
>/Share/jobs/customer1. Then we would like to
>give a unique logon id to customer 1 and use
>.AppleVolumes in their home directory to give
>them access to this one directory only. They
>could then access this "private" directory remotely
>using AppleShare IP.
>
>This would be repeated for multiple customers.
>
>This structure means there is a "base" directory
>called jobs, but nested would be other "base"
>directories from netatalk's perspective.
>
>This sounds like a potential problem that discourages
>me from try it (corrupt desktops, etc) but would like to
>know if anyone has tried such a thing...do you think
>it will work...etc.
>

Netatalk will allow logins to specific directories based on information in
/etc/passwd

So long as customer1, 2, ... has the appropriate home area defined as
/Share/jobs/customer1... etc, and you set your permissions right, you
shouldn't have any problems.

I'm still in the testing phase with this myself, though I have succeeded in
creating a network volume which holds system software to run from any Mac
on the network, by making it a guest account, but I set permissions on the
directory such that only the account-holder of that home area (I created a
dummy-user called 'apple', so I could gain access to the volume to modify
or add to it) can write to it.  You can set this on the main directory on
this volume, so that subdirectories containing programs pointed to by the
Applemenu can still be read and executed.  Whether it eventually trashes
the desktop remains to be seen.  A launcher on one Apple was trashed
recently, but that might have been due to a user.

Hope this helps,

regards,
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Laurence J. Rietberg, Systems Programmer (Part-time)
Language Laboratory, Faculty of Arts
The University of Queensland,	
St. Lucia, QLD 4072 AUSTRALIA		
Work hours: Mon8-12:00; Tue8-4:30; Thur & Fri 12-4

Email: lr at cltr.uq.edu.au; Phone:  +61 7 3365 6916
Fax: +61  7  3365 7077; Phone (A/H): +61 7 3841 2185
Email (A/H): laurence at uq.net.au
N.B. the statements in this email are my own,
and do not necessarily reflect those of my employer.
I am not obliged to service requests which are not 
related to the Lab, Lab network, and research staff 
and P/G students that access that network.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-