Exu - A System for Secure Delegation of Authority on an Insecure Network

摘要: Administration of a large and complex system poses several problems: Usually, some tasks must be delegated due to lack qualified or trusted staff, automated. In many cases, parts the task might need special credentials, such as Kerberos tickets AFS tokens, that may not necessarily easily available person executing task. The problem is most systems divide users into two groups: haves have nots, provide no mechanism for finer-grained access control. addition, executed carefully recorded possible later auditing. Earlier solutions, setuid bit, Moira, ADM, sysctl, can used accomplish this, either in limited dangerous (in case setuid) fashion. Exu proposes solve via secure, authenticated connection server with full authentication cause things happen real time.