From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: tuhs-bounces@minnie.tuhs.org X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=0.9 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE,SUBJ_ALL_CAPS autolearn=no autolearn_force=no version=3.4.2 Received: from minnie.tuhs.org (minnie.tuhs.org [45.79.103.53]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id 162984ff for ; Wed, 7 Nov 2018 14:07:15 +0000 (UTC) Received: by minnie.tuhs.org (Postfix, from userid 112) id E2B77A22C1; Thu, 8 Nov 2018 00:07:14 +1000 (AEST) Received: from minnie.tuhs.org (localhost [127.0.0.1]) by minnie.tuhs.org (Postfix) with ESMTP id 4CCDDA22A0; Thu, 8 Nov 2018 00:06:46 +1000 (AEST) Received: by minnie.tuhs.org (Postfix, from userid 112) id C7A06A22A0; Wed, 7 Nov 2018 21:54:22 +1000 (AEST) X-Greylist: delayed 453 seconds by postgrey-1.35 at minnie.tuhs.org; Wed, 07 Nov 2018 21:54:22 AEST Received: from avasout05.plus.net (avasout05.plus.net [84.93.230.250]) by minnie.tuhs.org (Postfix) with ESMTPS id 3196494111 for ; Wed, 7 Nov 2018 21:54:22 +1000 (AEST) Received: from mindy.dunnington.cx ([84.92.27.202]) by smtp with ESMTP id KMIIgMZEcpF8KKMIJgxO5a; Wed, 07 Nov 2018 11:46:48 +0000 X-CM-Score: 0.00 X-CNFS-Analysis: v=2.3 cv=cpi1bWwi c=1 sm=1 tr=0 a=W5Q3TbzFkoGugBkjAUuyvQ==:117 a=W5Q3TbzFkoGugBkjAUuyvQ==:17 a=IkcTkHD0fZMA:10 a=JHtHm7312UAA:10 a=DOhsZRx3HYxlXzXNK0IA:9 a=QEXdDO2ut3YA:10 a=pHzHmUro8NiASowvMSCR:22 a=nt3jZW36AmriUCFCBwmW:22 Received: from [172.17.2.96] (natpool1.dunnington.cx [84.92.27.201]) by mindy.dunnington.cx (8.12.9/8.12.9/8.12.9.08) with ESMTP id wA7BbXZ8020812 for ; Wed, 7 Nov 2018 11:37:34 GMT From: Pete Turnbull To: tuhs@minnie.tuhs.org References: <0289fa26-d157-8a65-389e-61dd7a01fcc4@spamtrap.tnetconsulting.net> <7d595808-fff7-4c1c-d969-362693ab2672@spamtrap.tnetconsulting.net> <7e9e6546-6575-e4d5-caf8-52c504f5a953@spamtrap.tnetconsulting.net> Message-ID: Date: Wed, 7 Nov 2018 11:37:32 +0000 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <7e9e6546-6575-e4d5-caf8-52c504f5a953@spamtrap.tnetconsulting.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-GB Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4wfNnPiBPlL+miao8em+QDXJP7v+7BKIxyMPrPanfKZXKf8By+HPuGAuz68jP7RQ6Nb4bHO//E/Yj3p0nAvitq3vdCNFv9rtRjfhRg4fjk2DxDqg+SLluR 0Kl4X09yeK+JiOAGWQrF+FOb2UeG4xr0j30TKGQlGvWZq/jNBfJNrZ11DKnNtgOaw++FtHOhl9dJ7g== Subject: Re: [TUHS] YP / NIS / NIS+ / LDAP X-BeenThere: tuhs@minnie.tuhs.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: The Unix Heritage Society mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: tuhs-bounces@minnie.tuhs.org Sender: "TUHS" On 07/11/2018 00:35, Grant Taylor via TUHS wrote: > On 11/06/2018 03:24 PM, Dan Cross wrote: >> Isn't that authorization? > > Not really. > > Authentication is proving that you are who you claim to be.  -  Show > your drivers license to the bouncer. > > Authorization is deciding if the authenticated entity is allowed to have > access or not.  -  Is your name on the list of people allowed into the > nightclub? > > Access Control - The bouncer, allowing you in or physically barring you > from entering. Not really. You go past the bouncer as an immediate consequence of authorization. The third 'A' is normally accounting: the bouncer notes the time you entered in the visitors book or logbook, and sometimes also notes the time you leave. Just about every network access service does this, and "access control" is the whole AAA thing combined. Have you ever seen a system that confirmed authentication and authorisation but then denied access (other than through a fault)? Denying access would be by a (possibly temporary) denial of authorisation. -- Pete Pete Turnbull