From: Evan Broder <broder@mit.edu>
Date: Sun, 29 Nov 2009 20:27:40 +0000 (-0500)
Subject: As noted in the invirt.authz.locker._authenticate docstring, if we
X-Git-Tag: 1.1.15~2
X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/xvm-prodconfig.git/commitdiff_plain/a2aeca3e5621dd96a1f3fb1e425dcf64c3bd429a?hp=e6b979f48c7493cf5a0aebb5d6880f1d78c19eaf

As noted in the invirt.authz.locker._authenticate docstring, if we
want to allow lockers that resolve in a particular cell but we don't
have (and can't get) a PTS ID in those cells, we need to list them
explicitly in the configuration.

svn path=/trunk/packages/xvm-prodconfig/; revision=2574
---

diff --git a/master.yaml b/master.yaml
index ddf4cd4..896df3b 100644
--- a/master.yaml
+++ b/master.yaml
@@ -12,6 +12,14 @@ authz:
    auth: yes
  - cell: sipb.mit.edu
    auth: yes
+ - cell: zone.mit.edu
+   auth: yes
+ - cell: ops.mit.edu
+   auth: no
+ - cell: net.mit.edu
+   auth: no
+ - cell: dev.mit.edu
+   auth: no
 
 console:
  hostname: xvm-console.mit.edu