From owner-freebsd-questions@FreeBSD.ORG  Fri Feb 13 06:21:08 2009
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id DDF6E106564A
	for <freebsd-questions@freebsd.org>;
	Fri, 13 Feb 2009 06:21:08 +0000 (UTC)
	(envelope-from rock_on_the_web@comcen.com.au)
Received: from angel.comcen.com.au (angel.comcen.com.au [203.23.236.69])
	by mx1.freebsd.org (Postfix) with ESMTP id A0D4F8FC0C
	for <freebsd-questions@freebsd.org>;
	Fri, 13 Feb 2009 06:21:08 +0000 (UTC)
	(envelope-from rock_on_the_web@comcen.com.au)
Received: from [192.168.0.192] (unknown [202.172.126.254])
	by angel.comcen.com.au (Postfix) with ESMTP id EE0E95C2F32B;
	Fri, 13 Feb 2009 17:22:31 +1100 (EST)
From: Da Rock <rock_on_the_web@comcen.com.au>
To: Chuck Swiger <cswiger@mac.com>
In-Reply-To: <F8CE7DF3-3991-4AB1-9AEA-FB667A82F01C@mac.com>
References: <325E4EC8-BD2B-45C1-978C-4922D16D3A94@identry.com>
	<9391FD2D-59ED-455A-8C87-2854C7EF1E52@mac.com>
	<ECDF6933-47F6-4D67-AC5C-5E149590D971@identry.com>
	<1234498626.13067.96.camel@laptop1.herveybayaustralia.com.au>
	<470E75B0-C7E9-4F05-A112-62DF01F1EA1D@mac.com>
	<1234500741.13067.111.camel@laptop1.herveybayaustralia.com.au>
	<F8CE7DF3-3991-4AB1-9AEA-FB667A82F01C@mac.com>
Content-Type: text/plain
Date: Fri, 13 Feb 2009 16:21:27 +1000
Message-Id: <1234506087.13067.123.camel@laptop1.herveybayaustralia.com.au>
Mime-Version: 1.0
X-Mailer: Evolution 2.24.4 FreeBSD GNOME Team Port 
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: Old user can't log in
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Feb 2009 06:21:09 -0000

On Thu, 2009-02-12 at 21:52 -0800, Chuck Swiger wrote:
> On Feb 12, 2009, at 8:52 PM, Da Rock wrote:
> >> With reasonable organization, and appropriate use of sudo or setgid
> >> binaries for things like people who use SVN or CVS, there generally
> >> isn't reason or need for a user to be in so many groups.  For the
> >> exceptional cases, switching to using a full ACL system rather than
> >> the traditional Unix permission model is probably going to be a  
> >> better
> >> solution.
> >
> > Interesting. What would you suggest for full ACL?
> 
> Well, it depends on what you're doing in terms of user requirements  
> and systems (ie, are the FreeBSD boxes fileservers, clients, or  
> both?), but the stuff which comes with FreeBSD is documented in  
> acl(3), getfacl, setfacl, etc.  Other choices might involve something  
> like the Andrew File System / Transarc DFS stuff, or Windows Active  
> Directory and Samba/CIFS on the FreeBSD boxes....
> 
> Regards,

So you're talking in terms of the FS only? I thought you said the kernel
wasn't capable? I'll have to look into this a more thoroughly, I'm
intrigued to say the least. Not to say I'll ever probably use it, but it
does present a limitation.