Silicon Graphics Gauntlet, Administrator'S Manual

Page: 251 / 306

Operation
225
• rsh-gw Rsh proxy
• tn-gw TELNET proxy
User or Group
You can permit or deny access to certain proxies by user or group.
To control access by user or group:
1. Add the operations attribute to your
authsrv
configuration specifying who can
perform the operation and what services they can access.
2. Add the
authenticate
attribute to the appropriate policy or proxy, requiring users to
autehnticate before using the service.
3. Add the
extended-permissions
attribute to the appropriate policy or proxy, indicating
that the authentication server should check information specified by the operations
keyword.
For example, Yoyodyne wants to permit only members of the group developer to use the
Rlogin proxy when accessing outside hosts:
55 authsrv: permit-operation group developer rlogin-gw *
100 rlogin-gw: authenticate *
101 rlogin-gw: extended-permissions *
These commands prevent any other users who are not members of group developer (in
the Gauntlet authentication database) from using the Rlogin proxy.
Operation
You can permit or deny access to certain proxies by time of day:
To control access by time of day:
1. Add the
operations
attribute to your
authsrv
configuration specifying who can
perform what operations, and what services they can access, and when.
2. Add the
authenticate
attribute to the appropriate policy or proxy, requiring users to
autehnticate before using the service.