From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <ee9e417a05052210214408406d@mail.gmail.com>
Date: Sun, 22 May 2005 13:21:16 -0400
From: Russ Cox <russcox@gmail.com>
To: Eric Van Hensbergen <ericvh@gmail.com>,
	Fans of the OS Plan 9 from Bell Labs <9fans@cse.psu.edu>
Subject: Re: [9fans] 9grid.us
In-Reply-To: <a4e6962a050522101472af7c7d@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <a4e6962a050522101472af7c7d@mail.gmail.com>
Cc: 
Topicbox-Message-UUID: 4fcf1a52-ead0-11e9-9d60-3106f5b1d025

> So I've got 9grid.us (with two rather slow cpu servers) more or less
> ready to go.  I wanted to set them up to just use
> sources.cs.bell-labs.com as their authentication server (so anyone
> would a sources account could drawterm to my cpu servers (or mount
> their filesystems, etc.)
>=20
> Unfortunately, I'm painfully ignorant about the Plan 9 security model.
>  IRC chatter indicates I need sources.cs.bell-labs.com's hostkey in my
> nvram in order for this to work.

All you need to do is put a sources key (any account)
into your server's factotum.  Unless it says "role=3Dclient"
factotum will use it for the server side of authentication.
If you make it the first (or only) such p9sk1 key in the list
then its domain will be the default chosen by a p9any
client with no keys, and thus will be the domain prompted
with when clients connect.

Russ