* Re: [9fans] Patch to secstore to unforce STA authentication.
@ 2003-09-28 21:53 David Presotto
2003-09-28 21:58 ` Dan Cross
2003-09-28 22:34 ` Charles Forsyth
0 siblings, 2 replies; 4+ messages in thread
From: David Presotto @ 2003-09-28 21:53 UTC (permalink / raw)
To: ehg, cross, 9fans
[-- Attachment #1: Type: text/plain, Size: 251 bytes --]
Actaully, I think that this is one case of too much paranoia. Is there anyone
else besides Bell Labs that uses secstored with STA turned on? If not, I'ld like
to just make it an option and not force it just because we're using an
alternate stack.
[-- Attachment #2: Type: message/rfc822, Size: 3066 bytes --]
From: cross@sdgm.net
To: 9fans@cse.psu.edu
Subject: [9fans] Patch to secstore to unforce STA authentication.
Date: Sun, 28 Sep 2003 17:37:08 -0400
Message-ID: <39b17e26a926e5f512cfa9ac236b8ff3@sdgm.net>
My CPU server has two interfaces, with seperate IP stacks. I run secstored
listening on both. This works reasonably well, except that when using the
`-x' flag to get secstored to listen on the second stack (mounted on /net.alt),
it forces STA authentication. This isn't really the behavior I want; I don't
need STA authentication there. So, I finally got around to adding a flag to
secstored to tell it to disable STA authentication in all cases. Here's the
patch; could this please be incorporated onto sources? Thanks.
- Dan C.
brahma% ape/diff -u /n/sources/plan9/sys/src/cmd/auth/secstore/secstored.c secstored.c
--- /n/sources/plan9/sys/src/cmd/auth/secstore/secstored.c Tue Sep 2 13:55:49 2003
+++ secstored.c Sun Sep 28 17:32:17 2003
@@ -319,7 +319,7 @@
void
main(int argc, char **argv)
{
- int afd, dfd, lcfd, forceSTA = 0;
+ int afd, dfd, lcfd, forceSTA = 0, unforceSTA = 0;
char adir[40], ldir[40], *remote;
char *serve = "tcp!*!5356", *p, aserve[128], net[128];
char *S = "secstore";
@@ -340,12 +340,18 @@
setnetmtpt(net, sizeof(net), p);
forceSTA = 1; // for any non-standard network setting, be paranoid
break;
+ case 'u':
+ unforceSTA = 1;
+ break;
case 'v':
verbose++;
break;
default:
usage();
}ARGEND;
+
+ if(unforceSTA)
+ forceSTA = 0;
if(!verbose)
switch(rfork(RFNOTEG|RFPROC|RFFDG)) {
brahma%
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [9fans] Patch to secstore to unforce STA authentication.
2003-09-28 21:53 [9fans] Patch to secstore to unforce STA authentication David Presotto
@ 2003-09-28 21:58 ` Dan Cross
2003-09-28 22:34 ` Charles Forsyth
1 sibling, 0 replies; 4+ messages in thread
From: Dan Cross @ 2003-09-28 21:58 UTC (permalink / raw)
To: 9fans
Sounds good to me.
- Dan C.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [9fans] Patch to secstore to unforce STA authentication.
2003-09-28 21:53 [9fans] Patch to secstore to unforce STA authentication David Presotto
2003-09-28 21:58 ` Dan Cross
@ 2003-09-28 22:34 ` Charles Forsyth
1 sibling, 0 replies; 4+ messages in thread
From: Charles Forsyth @ 2003-09-28 22:34 UTC (permalink / raw)
To: 9fans
i'd made a similar change
^ permalink raw reply [flat|nested] 4+ messages in thread
* [9fans] Patch to secstore to unforce STA authentication.
@ 2003-09-28 21:37 cross
0 siblings, 0 replies; 4+ messages in thread
From: cross @ 2003-09-28 21:37 UTC (permalink / raw)
To: 9fans
My CPU server has two interfaces, with seperate IP stacks. I run secstored
listening on both. This works reasonably well, except that when using the
`-x' flag to get secstored to listen on the second stack (mounted on /net.alt),
it forces STA authentication. This isn't really the behavior I want; I don't
need STA authentication there. So, I finally got around to adding a flag to
secstored to tell it to disable STA authentication in all cases. Here's the
patch; could this please be incorporated onto sources? Thanks.
- Dan C.
brahma% ape/diff -u /n/sources/plan9/sys/src/cmd/auth/secstore/secstored.c secstored.c
--- /n/sources/plan9/sys/src/cmd/auth/secstore/secstored.c Tue Sep 2 13:55:49 2003
+++ secstored.c Sun Sep 28 17:32:17 2003
@@ -319,7 +319,7 @@
void
main(int argc, char **argv)
{
- int afd, dfd, lcfd, forceSTA = 0;
+ int afd, dfd, lcfd, forceSTA = 0, unforceSTA = 0;
char adir[40], ldir[40], *remote;
char *serve = "tcp!*!5356", *p, aserve[128], net[128];
char *S = "secstore";
@@ -340,12 +340,18 @@
setnetmtpt(net, sizeof(net), p);
forceSTA = 1; // for any non-standard network setting, be paranoid
break;
+ case 'u':
+ unforceSTA = 1;
+ break;
case 'v':
verbose++;
break;
default:
usage();
}ARGEND;
+
+ if(unforceSTA)
+ forceSTA = 0;
if(!verbose)
switch(rfork(RFNOTEG|RFPROC|RFFDG)) {
brahma%
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2003-09-28 22:34 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2003-09-28 21:53 [9fans] Patch to secstore to unforce STA authentication David Presotto
2003-09-28 21:58 ` Dan Cross
2003-09-28 22:34 ` Charles Forsyth
-- strict thread matches above, loose matches on Subject: below --
2003-09-28 21:37 cross
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).