There is a difference between a user being able to access AFS space via an AFS proxy server and the server itself having direct AFS access. The Distributed Authentication Service requires direct AFS access . Classlists and AFS As part of the Distributed Authentication Service, DCAS and the Office of the Registrar provide access to the UCDLoginIDs of the members of each active class on campus. The purpose of these lists is to provide a means of authorization for the Distributed Authentication Service. Authentication is required when a webmaster needs to restrict access to a directory tree at a local web site to members of the UC Davis campus community.
Authorization is required when a webmaster needs to further restrict access.
One common form of restriction is by class membership. By restricting access according to class membership, the intellectual property rights of the faculty member who is posting material to the web can be properly enforced. The lists are updated nightly. The local web server must be capable of reading files in AFS space. There is a difference between a user being able to access AFS space via an AFS proxy server and the server itself having direct AFS access.