As noted in the invirt.authz.locker._authenticate docstring, if we

[invirt/packages/xvm-devconfig.git] / master.yaml

diff --git a/master.yaml b/master.yaml
index 3ed3c8d..d1c279d 100644 (file)
--- a/master.yaml
+++ b/master.yaml
@@ -5,11 +5,19 @@ kerberos:
  realm: ATHENA.MIT.EDU
 
 authz:
- - type: afs
-   cell: athena.mit.edu
+ mech: invirt.authz.locker
+ cells:
+ - cell: athena.mit.edu
    auth: no
- - type: afs
-   cell: sipb.mit.edu
+ - cell: sipb.mit.edu
+   auth: yes
+ - cell: zone.mit.edu
+   auth: no
+ - cell: ops.mit.edu
+   auth: no
+ - cell: net.mit.edu
+   auth: no
+ - cell: dev.mit.edu
    auth: no
 
 hosts: # hosts on which VMs run