Bay Networks 5390, Administering, Page: 443 / 888

893-741-B A15-23
Using Model 5390 Security
Following are sample acp_userinfo entries, including nve_filter information, for two users. User
frick is allowed access only to the resources of her office Macintosh named Frick CPU. User frack
cannot access frick’s machine, nor is she allowed access to any sales resources.
user frick
at_passwd klot
at_nve_filter include Frick\CPU:*@eng end
end
user frack
at_passwd curly
at_nve_filter exclude Frick*:*@ *:*@sales end
end
Like all other acp_userinfo entries, nve_filter information is syntax-checked by erpcd. Any errors
cause the entire filter to be discarded, and an error message is generated.
at_passwd
Each registered AppleTalk user (as opposed to a guest) must have a password defined in the
acp_userinfo file. Table A15-6 defines the argument for at_passwd entries in the acp_userinfo
file. The syntax is:
at_passwd string
CAUTION: This method of limiting NBP traffic is not secure, and can
be circumvented by a person willing to write some code to probe the
network without using NBP. Also, this feature has no local Model 5390
security equivalent.
Table A15-6. Entries for at_passwd in the acp_userinfo File
Entry Description
string A string of up to nine alphanumeric characters (the
un-encrypted password). Punctuation marks are permitted;
spaces and hex values must be preceded by a backslash (\).