Re-arrange the authz configuration.

In particular, even if we allow for mixing of multiple authz
mechanisms at some point, you won't have multiple instances of the
locker authz type, so the "type" shouldn't be a property of each of
the cells we specify how to authenticate against.

svn path=/trunk/packages/xvm-devconfig/; revision=2557

diff --git a/master.yaml b/master.yaml
index 3ed3c8d..8faa5de 100644 (file)
--- a/master.yaml
+++ b/master.yaml
@@ -5,11 +5,11 @@ kerberos:
  realm: ATHENA.MIT.EDU
 
 authz:
- - type: afs
-   cell: athena.mit.edu
+ mech: invirt.authz.locker
+ cells:
+ - cell: athena.mit.edu
    auth: no
- - type: afs
-   cell: sipb.mit.edu
+ - cell: sipb.mit.edu
    auth: no
 
 hosts: # hosts on which VMs run