[3021] in SIPB-AFS-requests
Re: transmitions to the zephyr class filsrv are now acled
daemon@ATHENA.MIT.EDU (John Hawkinson)
Thu Jun 11 11:28:24 1998
Date: Thu, 11 Jun 1998 11:26:26 -0400
To: Calista E Tait <cat@MIT.EDU>
Cc: ops@MIT.EDU, sipb-afsreq@MIT.EDU
In-Reply-To: "[9176] in Consulting_FYI"
From: John Hawkinson <jhawk@MIT.EDU>
|
| The zephyr class filsrv should be now acled so only the following
| kerberos instances can send zephyrs to the class. Subscriptions are
| unaffected. If you think that there are any other instances or
| paterns of instances that should be added please email ops.
This appears to fail from ronald-ann, either as rcmd.ronald-ann or as
jhawk.root.
jhawk.root can send authentic zepyrs from ronald-ann to non-acl'd classes.
jhawk.root can send zephyrs to -c filsrv from an 8.2 machine.
Some data follows.
zctl new_server doesn't help.
Thanks.
--jhawk
ronald-ann# zwrite -c filsrv -i jhawk
Type your message now. End with control-D or a dot on a line by itself.
test
.
Received authorization failure while sending to jhawk
ronald-ann# klist
Ticket file: /tmp/tkt_move
Principal: rcmd.ronald-ann@ATHENA.MIT.EDU
Issued Expires Principal
Jun 11 11:25:23 Jun 11 11:30:23 krbtgt.ATHENA.MIT.EDU@ATHENA.MIT.EDU
Jun 11 11:25:23 Jun 11 11:30:23 zephyr.zephyr@ATHENA.MIT.EDU
ronald-ann# zstat
Hostmanager stats: RONALD-ANN2.MIT.EDU
HostManager protocol version = ZEPH0.2
Current server = NESKAYA.MIT.EDU
Items in queue: 0
Client packets received: 923
Server packets received: 924
Server changes: 1
Version: $Id: zhm.c,v 1.53 94/02/22 15:28:38 probe Exp $
Looking for a new server: no
Time running: 193 days, 08:46:10
Size: 40776
Machine type: sun4
Server stats: NESKAYA.MIT.EDU
Server protocol version = ZEPH0.2
Current server version = Zephyr Server $Revision: 1.1 $: (Wed Jul 16 16:07:55 EDT 1997) root@white-westinghouse/SUN-4
Packets handled: 72441792 pkts
Uptime: 15 days, 20:04:36
Server states:
18.72.0.248/SERV_UP
18.72.0.23/SERV_UP
18.70.0.161/SERV_UP
ronald-ann#
