As noted in the invirt.authz.locker._authenticate docstring, if we

want to allow lockers that resolve in a particular cell but we don't
have (and can't get) a PTS ID in those cells, we need to list them
explicitly in the configuration.

svn path=/trunk/packages/xvm-prodconfig/; revision=2574

diff --git a/master.yaml b/master.yaml
index ddf4cd4..896df3b 100644 (file)
--- a/master.yaml
+++ b/master.yaml
@@ -12,6 +12,14 @@ authz:
    auth: yes
  - cell: sipb.mit.edu
    auth: yes
+ - cell: zone.mit.edu
+   auth: yes
+ - cell: ops.mit.edu
+   auth: no
+ - cell: net.mit.edu
+   auth: no
+ - cell: dev.mit.edu
+   auth: no
 
 console:
  hostname: xvm-console.mit.edu