From: Evan Broder <broder@mit.edu>
Date: Sun, 29 Nov 2009 20:27:40 +0000 (-0500)
Subject: As noted in the invirt.authz.locker._authenticate docstring, if we
X-Git-Tag: 0.42~2
X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/xvm-devconfig.git/commitdiff_plain/71ebc575e23aeb1f79c5e547c86f990e48f9fac5?hp=788bdff7416c96e4b76412f81d4e81e043765711;ds=sidebyside

As noted in the invirt.authz.locker._authenticate docstring, if we
want to allow lockers that resolve in a particular cell but we don't
have (and can't get) a PTS ID in those cells, we need to list them
explicitly in the configuration.

svn path=/trunk/packages/xvm-devconfig/; revision=2574
---

diff --git a/master.yaml b/master.yaml
index 8faa5de..d1c279d 100644
--- a/master.yaml
+++ b/master.yaml
@@ -10,6 +10,14 @@ authz:
  - cell: athena.mit.edu
    auth: no
  - cell: sipb.mit.edu
+   auth: yes
+ - cell: zone.mit.edu
+   auth: no
+ - cell: ops.mit.edu
+   auth: no
+ - cell: net.mit.edu
+   auth: no
+ - cell: dev.mit.edu
    auth: no
 
 hosts: # hosts on which VMs run