[AFS3-std] rxgk/rxgk-afs updates
Benjamin Kaduk
kaduk@MIT.EDU
Thu, 7 Mar 2013 09:53:35 -0500 (EST)
On Thu, 7 Mar 2013, Simon Wilkinson wrote:
>
> On 5 Mar 2013, at 15:42, Benjamin Kaduk wrote:
>
>>> <t>Once a fileserver has been marked as supporting rxgk, VL_RegisterAddrs
>>> calls for that fileserver MUST only be accepted over an rxgk
>>> protected connection. vlservers MUST only accept calls to VL_RegisterAddrs
>>> from a printed token, an administrator, or the identity registered for the
>>> fileserver using a prior call to VL_RegisterAddrsandKey.</t>
>>
>> That works for me, modulo the second sentence not specifying rxgk connections.
>
> Why does the second sentence have to specify rxgk connections? Surely
> they are already required by the first sentence.
Looking back at that comment, I'm not sure why. Maybe I misread a
RegisterAddrsAndKey for one of the RegisterAddrs appearances.
(We specify that RegisterAddrsAndKey MUST be called over an rxgk secured
connection elsewhere, so that aspect is fine anyway.)
-Ben