[AFS3-std] rxgk/rxgk-afs updates

Benjamin Kaduk kaduk@MIT.EDU
Thu, 7 Mar 2013 09:53:35 -0500 (EST)


On Thu, 7 Mar 2013, Simon Wilkinson wrote:

>
> On 5 Mar 2013, at 15:42, Benjamin Kaduk wrote:
>
>>> <t>Once a fileserver has been marked as supporting rxgk, VL_RegisterAddrs
>>> calls for that fileserver MUST only be accepted over an rxgk
>>> protected connection. vlservers MUST only accept calls to VL_RegisterAddrs
>>> from a printed token, an administrator, or the identity registered for the
>>> fileserver using a prior call to VL_RegisterAddrsandKey.</t>
>>
>> That works for me, modulo the second sentence not specifying rxgk connections.
>
> Why does the second sentence have to specify rxgk connections? Surely 
> they are already required by the first sentence.

Looking back at that comment, I'm not sure why.  Maybe I misread a 
RegisterAddrsAndKey for one of the RegisterAddrs appearances.
(We specify that RegisterAddrsAndKey MUST be called over an rxgk secured 
connection elsewhere, so that aspect is fine anyway.)

-Ben