mirror of
https://git.openafs.org/openafs.git
synced 2025-01-22 00:41:08 +00:00
68 lines
4.0 KiB
HTML
68 lines
4.0 KiB
HTML
|
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 4//EN">
|
||
|
|
<HTML><HEAD>
|
||
|
|
<TITLE>Administration Reference</TITLE>
|
||
|
|
<!-- Begin Header Records ========================================== -->
|
||
|
|
<!-- /tmp/idwt3672/auarf000.scr converted by idb2h R4.2 (359) ID -->
|
||
|
|
<!-- Workbench Version (AIX) on 3 Oct 2000 at 16:18:30 -->
|
||
|
|
<META HTTP-EQUIV="updated" CONTENT="Tue, 03 Oct 2000 16:18:29">
|
||
|
|
<META HTTP-EQUIV="review" CONTENT="Wed, 03 Oct 2001 16:18:29">
|
||
|
|
<META HTTP-EQUIV="expires" CONTENT="Thu, 03 Oct 2002 16:18:29">
|
||
|
|
</HEAD><BODY>
|
||
|
|
<!-- (C) IBM Corporation 2000. All Rights Reserved -->
|
||
|
|
<BODY bgcolor="ffffff">
|
||
|
|
<!-- End Header Records ============================================ -->
|
||
|
|
<A NAME="Top_Of_Page"></A>
|
||
|
|
<H1>Administration Reference</H1>
|
||
|
|
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf027.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Bot_Of_Page"><IMG SRC="../bot.gif" BORDER="0" ALT="[Bottom of Topic]"></A> <A HREF="auarf029.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
|
||
|
|
<P>
|
||
|
|
<H2><A NAME="HDRNOAUTH" HREF="auarf002.htm#ToC_26">NoAuth</A></H2>
|
||
|
|
<P><STRONG>Purpose</STRONG>
|
||
|
|
<A NAME="IDX3964"></A>
|
||
|
|
<A NAME="IDX3965"></A>
|
||
|
|
<A NAME="IDX3966"></A>
|
||
|
|
<P>Disables authorization checking
|
||
|
|
<P><STRONG>Description</STRONG>
|
||
|
|
<P>The <B>NoAuth</B> file, if present in a server machine's
|
||
|
|
<B>/usr/afs/local</B> directory, indicates to the AFS server processes
|
||
|
|
running on the machine that it is not necessary to perform authorization
|
||
|
|
checking. They perform any action for any user who logs into the
|
||
|
|
machine's local file system or issues a remote command that affects the
|
||
|
|
machine's AFS server functioning, such as commands from the AFS command
|
||
|
|
suites. Because failure to check authorization exposes the
|
||
|
|
machine's AFS server functionality to attack, there are normally only two
|
||
|
|
circumstances in which the file is present:
|
||
|
|
<UL>
|
||
|
|
<P><LI>During installation of the machine, as instructed in the <I>IBM AFS
|
||
|
|
Quick Beginnings</I>
|
||
|
|
<P><LI>During correction of a server encryption key emergency, as discussed in
|
||
|
|
the <I>IBM AFS Administration Guide</I>
|
||
|
|
</UL>
|
||
|
|
<P>In all other circumstances, the absence of the file means that the AFS
|
||
|
|
server processes perform authorization checking, verifying that the issuer of
|
||
|
|
a command has the required privilege.
|
||
|
|
<P>Create the file in one of the following ways:
|
||
|
|
<UL>
|
||
|
|
<P><LI>By issuing the <B>bosserver</B> initialization command with the
|
||
|
|
<B>-noauth</B> flag, if the Basic OverSeer (BOS) Server is not already
|
||
|
|
running
|
||
|
|
<P><LI>By issuing the <B>bos setauth</B> command with <B>off</B> as the
|
||
|
|
value for the <B>-authrequired</B> argument, if the BOS Server is already
|
||
|
|
running
|
||
|
|
</UL>
|
||
|
|
<P>To remove the file, issue the <B>bos setauth</B> command with
|
||
|
|
<B>on</B> as the value for the <B>-authrequired</B> argument.
|
||
|
|
<P>The file's contents, if any, are ignored; an empty (zero-length)
|
||
|
|
file is effective.
|
||
|
|
<P><STRONG>Related Information</STRONG>
|
||
|
|
<P><A HREF="auarf115.htm#HDRBOS_SETAUTH">bos setauth</A>
|
||
|
|
<P><A HREF="auarf124.htm#HDRBOSSERVER">bosserver</A>
|
||
|
|
<P>
|
||
|
|
<HR><P ALIGN="center"> <A HREF="../index.htm"><IMG SRC="../books.gif" BORDER="0" ALT="[Return to Library]"></A> <A HREF="auarf002.htm#ToC"><IMG SRC="../toc.gif" BORDER="0" ALT="[Contents]"></A> <A HREF="auarf027.htm"><IMG SRC="../prev.gif" BORDER="0" ALT="[Previous Topic]"></A> <A HREF="#Top_Of_Page"><IMG SRC="../top.gif" BORDER="0" ALT="[Top of Topic]"></A> <A HREF="auarf029.htm"><IMG SRC="../next.gif" BORDER="0" ALT="[Next Topic]"></A> <A HREF="auarf284.htm#HDRINDEX"><IMG SRC="../index.gif" BORDER="0" ALT="[Index]"></A> <P>
|
||
|
|
<!-- Begin Footer Records ========================================== -->
|
||
|
|
<P><HR><B>
|
||
|
|
<br>© <A HREF="http://www.ibm.com/">IBM Corporation 2000.</A> All Rights Reserved
|
||
|
|
</B>
|
||
|
|
<!-- End Footer Records ============================================ -->
|
||
|
|
<A NAME="Bot_Of_Page"></A>
|
||
|
|
</BODY></HTML>
|