Move XVM's locker authorization code into a separate xvm-authz-locker

[invirt/packages/xvm-devconfig.git] / master.yaml

diff --git a/master.yaml b/master.yaml
index d1c279d..a3edbaa 100644 (file)
--- a/master.yaml
+++ b/master.yaml
@@ -5,20 +5,21 @@ kerberos:
  realm: ATHENA.MIT.EDU
 
 authz:
  realm: ATHENA.MIT.EDU
 
 authz:

- mech: invirt.authz.locker
- cells:
- - cell: athena.mit.edu
-   auth: no
- - cell: sipb.mit.edu
-   auth: yes
- - cell: zone.mit.edu
-   auth: no
- - cell: ops.mit.edu
-   auth: no
- - cell: net.mit.edu
-   auth: no
- - cell: dev.mit.edu
-   auth: no
+ mech: xvm.authz.locker
+ afs:
+  cells:
+  - cell: athena.mit.edu
+    auth: no
+  - cell: sipb.mit.edu
+    auth: yes
+  - cell: zone.mit.edu
+    auth: no
+  - cell: ops.mit.edu
+    auth: no
+  - cell: net.mit.edu
+    auth: no
+  - cell: dev.mit.edu
+    auth: no

 
 hosts: # hosts on which VMs run
  - hostname: black-mesa.mit.edu
 
 hosts: # hosts on which VMs run
  - hostname: black-mesa.mit.edu