On Thu, 7 Mar 2013, Simon Wilkinson wrote:
On 5 Mar 2013, at 15:42, Benjamin Kaduk wrote:
<t>Once a fileserver has been marked as supporting rxgk, VL_RegisterAddrs
calls for that fileserver MUST only be accepted over an rxgk
protected connection. vlservers MUST only accept calls to VL_RegisterAddrs
from a printed token, an administrator, or the identity registered for the
fileserver using a prior call to VL_RegisterAddrsandKey.</t>
That works for me, modulo the second sentence not specifying rxgk connections.
Why does the second sentence have to specify rxgk connections? Surely
they are already required by the first sentence.
Looking back at that comment, I'm not sure why. Maybe I misread a
RegisterAddrsAndKey for one of the RegisterAddrs appearances.
(We specify that RegisterAddrsAndKey MUST be called over an rxgk secured
connection elsewhere, so that aspect is fine anyway.)
-Ben
_______________________________________________
AFS3-standardization mailing list
[email protected]
http://lists.openafs.org/mailman/listinfo/afs3-standardization
