As noted in the invirt.authz.locker._authenticate docstring, if we

want to allow lockers that resolve in a particular cell but we don't
have (and can't get) a PTS ID in those cells, we need to list them
explicitly in the configuration.

svn path=/trunk/packages/xvm-devconfig/; revision=2574

diff --git a/master.yaml b/master.yaml
index 8faa5de..d1c279d 100644 (file)
--- a/master.yaml
+++ b/master.yaml
@@ -10,6 +10,14 @@ authz:
  - cell: athena.mit.edu
    auth: no
  - cell: sipb.mit.edu
+   auth: yes
+ - cell: zone.mit.edu
+   auth: no
+ - cell: ops.mit.edu
+   auth: no
+ - cell: net.mit.edu
+   auth: no
+ - cell: dev.mit.edu
    auth: no
 
 hosts: # hosts on which VMs run