[netatalk-admins] a cold wind bloweth


Subject: [netatalk-admins] a cold wind bloweth
From: a sun (asun@saul4.u.washington.edu)
Date: Mon May 24 1999 - 16:49:39 EDT


hi all,

i would like to feature freeze my latest snapshot and make sure that
it's as bug-free(tm) as possible. so, here's what i would like:
     1) reports on things that used to work that no longer do.

     2) reports on things that cause crashes. i need to know how to
        duplicate this.

     3) notes on whether or not it works properly on *bsd, sunos, and
        ultrix. if it doesn't, i need info on how to get it to work
        (most likely in the area of the shared library support).

     4) please make sure to edit the global Makefile to suit your
        needs. it suits mine, but then i tend to turn on lots of
        stuff. just because it doesn't compile doesn't mean that it's
        a problem.

     5) i've purposely broken the did database stuff for now so that i
        can add in all the bits needed for almost full AFP
        compliance. so, don't use it now. it will get fixed after this
        upcoming release.

what's new in this snapshot?
     1) global afppasswd file for randnum authentication. if you
        specify -passwdfile ${RESDIR}/etc/afppasswd, it will use that
        instead. if there's an afppasswd.key file, it will use the
        hex-translated password stored in that file to des
        encrypt/decrypt the user passwords. needless to say, only
        root should be able to do all of this. there's an afppasswd
        utility as well. if you're not root, however, it will only
        modify ${RESDIR}/etc/afppasswd.

        beyond that, afppasswd also uses cracklib if requested. i
        forgot to add in the appropriate call to the password changing
        part of uam_randnum.so though. that'll appear in the next
        version.

     2) rwlist/rolist in AppleVolumes.*. these are like allow/deny
        except they modify the readonly volume flag. note: if you have
        a rwlist, the user must be in that to get rw behaviour. also,
        this doesn't override file permissions.

     3) some miscellaneous bug fixes. there's also a workaround for
        apple's broken macbinary II files.
  
     4) oh yeah, you might want to try out the DHX uam. it's a
        public-key exchange based authentication method. you can get
        the plug-in from the 3.8.3 appleshare client image. note: if
        you get an error, you'll get dropped into macsbug. to get
        things to work, you'll need the cryptolib from ssleay. in
        addition, there's currently a bug in the 3.8.3 uam that i work
        around. i'll be getting rid of the workaround as soon as 3.8.4
        appears.

note: because i've switched to plug-in uams, the old method of
specifying them no longer works. please read config/afpd.conf for
further info.

location:
<ftp://ftp.u.washington.edu/public/asun/testing/pre-asun2.1.4-17.tar.gz>

-a



This archive was generated by hypermail 2b28 : Sat Dec 18 1999 - 16:16:44 EST