HDTenEightyP/NetNews huggingface dataset:
From: Andrew Gilmartin <Andrew_Gilmartin@Brown.Edu>
Newsgroups: comp.protocols.appletalk
Subject: Basic debugging of new CAP installation
Date: 1 Oct 1992 20:21:26 GMT
Organization: Brown University
Distribution: world
NNTP-Posting-Host: cis_staff-kntx31.cis.brown.edu
X-UserAgent: Nuntius v1.1.1d7
X-XXDate: Thu, 1 Oct 92 21:25:52 GMT

I have just installed CAP 6 pl 100 on an DECsystem-5000/100
running ULTRIX V4.2A (Rev. 47) and am now trying to configure
it for IPTalk. I have tried numerious attempts at selecting
appropriate numbers for /etc/atalk.local and yet having
samples/getzones find nothing. Does anyone have suggestions for
debugging the installation configuration? Thanks.

-- Andrew
From: harmon@ford.mps.ohio-state.edu (Jim Harmon)
Newsgroups: comp.protocols.appletalk
Subject: Nedd help with cap (lwsrv)
Date: 6 Oct 1992 16:37:39 -0400
Organization: Department of Mathematics, The Ohio State University
Distribution: usa
NNTP-Posting-Host: ford.mps.ohio-state.edu

I'm having a problem printing from my macs to my unix(SunOS 4.1.2)
printer using cap (lwsrv). My problem is that when the mac spools to the
printer the cf and df files appear in /usr/spool/printer, the df file is 
a link to /tmp/lwsrvXXXXXX. The job appears in the queue briefly and then 
dissapears without any error, as if it was printing an empty file. If I
turn off the queue, send a job, remove the link, copy the /tmp/lwsrvXXXXX 
file the the appropriate df file in  /usr/spool/printer it works fine.
Any help would appriciated.

harmon@mps.ohio-state.edu
Newsgroups: comp.protocols.appletalk,comp.sys.sgi
From: geoffw@extro.ucc.su.OZ.AU (Geoffrey Warren Hicks)
Subject: CAP print queue entry not going away
Organization: Sydney University Computing Service, Sydney, NSW, Australia
Date: Tue, 29 Sep 1992 02:57:05 GMT


Posted on behalf of Craig Southeren who does not have access to
a net account:
-------------------------------------------------------------------

I'm trying to get CAP patch level 126 going a duo of SGI Personal
Iris 35D machines. I have the basics of CAP going, i.e. aufs etc,
and I can even print to our LaserWriter II from Unix. Unfortunately,
the lpd print queue entries have to be removed manually using
lprm, as they do not go away when the print job has completed.
Unless this is done, the whole lpd print system is stopped.
Also, the daemon has to be restarted for each job which gets queued
behind a completed one. This does not appear to worry the printer,
as jobs from attached Macintoshes work OK when the Iris gets into
this state.

If I enable the DEBUG flag for papif, it appears to run through
comletely, as show below

papif: Starting job for root@zippo at Tue Sep 29 12:35:47 1992 on printer LaserWriter II NT :LaserWriter@IIfx-Local
papif: bannerfirst no, bannerlast no, verboselog yes
papif: atpresponse timeout = 480 ticks (1/4 second units)
papif: status watch lower time limit 10 seconds
papif: rflowq = 8 packets, sflowq = 8 packets
papif: strip control d's no, map carriage return to line feed no
papif: accounting = yes, chargebanner yes, idlestuff yes, structured yes
papif: reverse = none
papif: pstext = none
papif: banner file = .banner
papif: cap.printers = /etc/cap.printers
papif: Finished job at Tue Sep 29 12:35:54 1992

Our printcap looks pretty ordinary:

ps|PostScript|LaserWriter|A sample LaserWriter printer:\
        :lp=/dev/ps:\
        :sd=/usr/spool/lpd/ps:\
        :pl#72:pw#85:\
        :sf:\
        :lf=/usr/adm/ps-errs:\
        :af=/usr/adm/ps.acct:\
        :if=/usr/local/cap/ps:\
        :of=/usr/local/cap/debug.papof:

Out network topology is really weird:

            Ethernet                    Local Talk

Iris                     Max IIfx
running                   with                          assorted 
CAP with +------+------+ Liasion  +---------+--------+    macs
UAB             |        software           |
                |         router            |
                +                           +
             Quadra 700                LaserWriter II
           (EtherTalk phase II)

The IIfx acts as a router between Ethertalk Phase I (UAB on Iris),
Ethertalk Phase II (the Quadra), and Localtalk (the Laserwriter).
And apart from this printing problem, it works!!!!

  Thanks in advance

     Craig

-------------------------------------------------------------------
Craig Southeren                    |  "You can have it good, cheap,
email: c/- geoffw@extro.ucc.oz.au  |  "or fast. Any two"
phone: +61 2 4393278               | Arthur C. Clarke,
-------------------------------------------------------------------

Newsgroups: comp.protocols.appletalk
From: galpmn01@ngals011 (peter mcnally)
Subject: ushare/pacershare/Helios
Reply-To: galpmn01@nt.com
Organization: Northern Telecom, Galway, Ireland.
Date: Tue, 06 Oct 1992 18:27:22 GMT


I am evaluating Appleshare-on-Unix s/w, and have looked at CAP, ushare
and PacerShare. I understand there is a package called EtherShare from
Helios....is this correct?

Could some-one post me an evaluation (or even some impressions) of this 
product? ....I will give a summary on all 4 packages next week. (Maybe 
some-one has already compared these???)


Peter.....galpmn01@nt.com

-- 
Peter McNally		
Northern Telecom, Galway, Ireland   E-mail  galpmn01@nt.com
From: vincent@cad.gatech.edu (Vincent Fox)
Newsgroups: comp.protocols.appletalk
Subject: Re: CAP Appletalk Zones
Date: 6 Oct 1992 13:29:05 -0400
Organization: Georgia Institute of Technology, CAE/CAD Lab
Distribution: usa
NNTP-Posting-Host: cae.cad.gatech.edu

In <1992Oct6.165154.24362@research.nj.nec.com> adam@research.nj.nec.com (Adam Porter) writes:
>With CAP 6.0 pl 126 on a Sun (4.1.2 OS, Native Ethertalk) how do I
>make sure I'm setting up a zone properly?  aarpd complains "zone
>unknown" when I try to seed it with etalk.local and/or assign it on
>the command line.

This is proper. CAP is a service provider of things like file sharing
and print sharing.

>(There's another Sun setting up its own zone, and I keep getting stuck
>in his zone instead of creating my own.)

You should select an *existing* zone name for aarpd.

>How do I use the CAP programs to create my own zone??

Creation of zones is a function normally reserved for routers.
You would create new zones using your friendly Gatorbox, FastPath
or whatever is currently zoning you.
From: glen@Cayman.COM (Glen B. Glater)
Newsgroups: comp.protocols.appletalk
Subject: Re: Printing from Macs to ethernetted unix boxes
Date: 30 Sep 92 17:42:47 GMT
Organization: Cayman Systems Inc., Cambridge, MA
In-reply-to: dave@macdavid.han.de's message of 28 Sep 92 18:44:06 GMT

In article <D2150069.eq4855@macdavid.han.de> dave@macdavid.han.de (David C Long) writes:

  >In Regards to your letter <1992Sep24.133255.1477@colorado.edu>:
  >> I have several Macs on the ethernet.  I also have an RS6000 running
  >> AIX3.2 and a NeXT running NS3.0 on the ethernet.  I would like the Macs to be
  >> able to print to queues on one of these machines and to mount
  >> file systems from one of these machines through appleshare.
  >
  >I work for Helios Software in Hannover, and we have a non-PD solution
  >to your problem, at least for RS/6000, not NeXT. 
  >
  >The question is, what is cheaper:
  >
  >a) Buy our EtherShare software (approx. $5300)
  >
  >b) buy a Fastpath and hire a full-time Unix guru to look after CAP
  >
  >Mail me at work if you want more details (dave@helios.de).
  >
  >We have two US distributors.
  >
  >Dave

In fairness to everyone else, let's mention all of the players in this
arena.

You can use the GatorBox CS to mount NFS volumes from Macintoshes on your 
AppleTalk network using GatorShare.  GatorPrint (part of GatorShare) 
allows your Unix users to print to your AppleTalk based printers.

LPR 1.2 from Brown University allows you to print from a Mac to your Unix
based printer queues.  It is availble via anonymous ftp from 
brownvm.brown.edu.

InterCon has a Mac based NFS client software called NFS Share that allows
Mac users to mount NFS servers as clients.  They also have a program called
InterPrint that allows Mac users to print to Unix print queues.

Also, if you decide to use CAP, you don't have to buy a FastPath.  You can
also use a Cayman GatorBox CS, a Webster MultiGate, a Compatible Systems
EtherRoute, or any other LocalTalk-Ethernet router.

As always, questions can be directed to Cayman Tech support at email
address support@cayman.com or to me directly at address glen@cayman.com.

Glen

--

	*************************************************************
	Glen B. Glater				Phone: (617) 494-1999         
	Technical Support Engineer		Fax:   (617) 494-5167         
	Cayman Systems Inc.			Internet: glen@cayman.com     
	26 Landsdowne Street			AppleLink:  CAYMAN.TECH	      
	Cambridge, MA   02139            SneakerNet:  3rd cube on the left    
Newsgroups: comp.protocols.appletalk
From: cvogel@iscnvx.lmsc.lockheed.com (Christopher P. Vogel)
Subject: DDPChecksums problem
Organization: Lockheed Missiles and Space Co.
Distribution: usa
Date: Tue, 29 Sep 92 17:41:24 GMT

I am running CAP 6.0 (125 patches) on a Sparc 2 (SunOS 4.1.1). The
S/W is configured for native EtherTalk.  I am trying to print to a 
LaserWriter NTR and cannot see it using atlooklws. This printer is
visible using Chooser.  This printer is located on the other side 
of a Cayman GatorBox CS. Their are other printers located in this
zone (IIg, NTX) which I can see using atlook as well as in 
Chooser.  I have already configured CAP to disable DDP checksums and 
am running atis with the -k option. 



  _____
 | Sun |                      -----     -------------------
 | S-2 |                     |Gator|___| LaserWriter NTR   |
   ----                      | Box |   |(O84-30 Lorraine's)|
    |                         -----     -------------------
    |     Ethernet              |
 -----------------------------------------------------------------


The GatorBox is running GatorSystem version 2.0.0 (build 1). The Firmware
level is 1.2. 

1) Has anyone experienced similar problems?
2) Is it possible that their is a configuration problem with the GatorBox?
3) Does anyone have any other suggestions?

Any help would be greatly appreciated.  Thanks in advance.

-- 
Chris Vogel
cvogel@iscnvx.lmsc.lockheed.com
Newsgroups: comp.protocols.appletalk,comp.sys.sgi
From: milius@proton.med.umn.edu (Bob Milius (BMEC))
Subject: Re: CAP print queue entry not going away
Organization: University of Minnesota
Date: Tue, 29 Sep 1992 14:09:17 GMT

In article <geoffw.717735425@extro.ucc.su.OZ.AU> geoffw@extro.ucc.su.OZ.AU (Geoffrey Warren Hicks) writes:
>
>Posted on behalf of Craig Southeren who does not have access to
>a net account:
>-------------------------------------------------------------------
>
>I'm trying to get CAP patch level 126 going a duo of SGI Personal
>Iris 35D machines. I have the basics of CAP going, i.e. aufs etc,
>and I can even print to our LaserWriter II from Unix. Unfortunately,
>the lpd print queue entries have to be removed manually using
>lprm, as they do not go away when the print job has completed.
>Unless this is done, the whole lpd print system is stopped.
>Also, the daemon has to be restarted for each job which gets queued
>behind a completed one. This does not appear to worry the printer,
>as jobs from attached Macintoshes work OK when the Iris gets into
>this state.
>
> ...etc

I am having the same problem... prints okay with lpr via papif which
seems to finish okay, but the job is never removed from the queue.
The weird thing is everything ran fine under IRIX 3.3.2, but 
now have problems with 4.0.1.

I have yet to come across a fix, or even a hint to the cause of the
problem.

-bob
-- 
--------------------------------------------------------------------------
Robert P. Milius, Ph.D.                           milius@lenti.med.umn.edu
Box 107 UMHC                                      (612) 626-2614
Biomedical Engineering Center                     (612) 625-1121 (fax)
From: daf@bbn.com (David A Fagan)
Newsgroups: comp.protocols.appletalk
Subject: Aufs Users&Groups
Date: 30 Sep 92 18:01:59 GMT
Followup-To: comp.protocols.appletalk
Organization: Bolt, Beranek & Newman
NNTP-Posting-Host: bbn.com

Can I use CAP/Aufs as a "normal" (Apple-style) AppleShare server?

 All installations of Aufs which I've seen have a public volume which
people mount by logging in as Guest (and therefore all have the same privs)
or private volumes where each person sees a different volume when they log
in.

Apple's AppleShare server lets users to log in with their own ids and mount
a public volume which contains directories to which they may or may not
have access, depending on their membership in a particular "group".

Can Aufs do the latter, and if so, is there a utility for establishing
users & groups (a la AppleShare Admin), or do I need to do that by creating
Unix users & groups.

------------------------------------------------------------
Headline: Suburban Wild Boy raised by Golden Retrievers!

David A. Fagan                BBN Systems & Technologies
daf@bbn.com                   10 Moulton St.
(617) 873-3246                Cambridge, MA 02138
Newsgroups: comp.protocols.appletalk
From: dmanning@cwis.unomaha.edu (David Manning)
Subject: Re: Question about Apple's Internet Router
Organization: University of Nebraska at Omaha
Date: Wed, 30 Sep 1992 21:38:10 GMT

lam@mrcnext.cso.uiuc.edu (Ken Lam) writes:

>A little while back, I read in one of the newsgroups that the internet router
>would allow you to route packets between ethernet and appletalk using a mac.

>Is this true?  I'd much rather dedicate a SE or CLASSIC than buy a Gatorbox
>or a FastPath.

Yes, it's true. However, considering how someone on the net was selling a 
(albeit used) FastPath 4 for something like $300-$400 not too long ago, it
really is a better solution.

Internet Router isn't particularly robust, has very few management features
to speak of, and can be a real pain. Plus, you don't *have* to dedicate
a small box w/ ethernet card, hard drive, and memory to do the job.

Just my opinion,

Dave

--
[ Dave Manning * Part-Time Instructor * dmanning@cwis.unomaha.edu * Testing...]
From: walsteyn@fys.ruu.nl (Fred Walsteijn)
Newsgroups: comp.protocols.appletalk
Subject: HELP !! -- CAP file dates incorrect if Mac time is modified
Keywords: CAP, time
Date: 30 Sep 92 12:51:17 GMT
Organization: Physics Department, University of Utrecht, The Netherlands

I have AUFS-CAP pl100 running on a DEC/Ultrix 4.2 (without kernel patches,
and compiled with -DUSE_MAC_DATES).

Last weekend our country (as many other European countries) switched from
``summer time'' to ``winter time'': i.e. each clock had to be turned back
precisely 1 hour.

Turning back the DEC system clock gave no problems. However, if I turn
back the clock on my Mac IIfx, then all Mac files residing on the CAP volume
get older by precisely 1 hour. Restoring the Mac clock fixes that (but
is not a real fix since that would leave me with ``summer time'' on
my Mac).

So, the question is: how can I retain the file times on the CAP volumes
while modifying my Mac's time.

I'm using the file times very intensively through MPW's backup command.
Please help; thanks very much in advance.
Fred.
-----------------------------------------------------------------------------
Fred Walsteijn                                | Internet: walsteyn@fys.ruu.nl
Institute for Marine and Atmospheric Research | FAX:      31-30-543163
Utrecht University, The Netherlands           | Phone:    31-30-533169
From: kspeicht@kilcom1.ucis.dal.ca (Kevin F. Speichts)
Newsgroups: comp.protocols.appletalk
Subject: NCSA Telnet for PC on a local talk network.
Date: 6 Oct 92 17:00:04 GMT
Organization: Dalhousie University, Halifax, Nova Scotia


	Has anyone gotten this to work?  We have two Zenith 286's on an 
local talk network.  We use Appleshare 2.01.  We're trying to get NCSA 
Telnet ver. 2.3b05 to work.   In config.tel we set hardware=appletalk and 
myip=RARP.   Telnet starts, spits up some appletalk zone info., gets 
its RARP info., but whenever you try to telnet you get a stack 
overflow error.  I think that we may need to use a newer version of telnet?  
Has anyone managed to get this to work.  If so which version of telnet?  How 
is your config.tel file setup?  Did you configure Appleshare in a special 
way (net.cfg?).

	Any help would be greatly appreciated.

	Thanks...




<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
Kevin Speichts                            KSPEICHT@KILCOM1.UCIS.DAL.CA
NSTN Operations Centre, Communications Services    Tel: (902) 494-2833
Killam Library, Dalhousie University               Fax: (902) 494-2319
Halifax, Nova Scotia Canada B3H 4H8
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Newsgroups: comp.protocols.appletalk,comp.sys.mac.comm
From: karches@utdallas.edu (Tom Karches)
Subject: Where are MacTCP docs?
Organization: Univ. of Texas at Dallas
Date: Sun, 27 Sep 1992 01:38:30 GMT

There is an anonymous FTP site that contains some of the MacTCP 
documents and some developer information. I misplaced the 
address and need to get copies.

Can someone point me in the right direction?

Please respond by email so I don't miss your post.

Regards,
Tom Karches
karches@utdallas.edu
-- 
-------------------------------------------------------------------------------
Tom Karches          |"If rap music had been around when I was a kid,
karches@utdallas.edu | I would have become a musician instead of a politician."
karches@holonet.net  '-------------------------------------- Richard Nixon
Newsgroups: comp.protocols.kerberos
From: 0003858921@MCIMAIL.COM ("Robert G. Moskowitz")
Subject: Kerberized RPCs
Organization: Internet-USENET Gateway at Stanford University
Date: Fri, 2 Oct 1992 12:14:00 GMT

I'm trying to remember/find in my notes how a Kerberized RPC works.

Case-in-point.  A UDP based or TCP based connection is opened, one packet is
sent to the server requesting data, the ACK comes back to the client with the
requested data.  Then the connection is closed...

How is the Authentication handled?  I remember Jeff Schiller pointing out a lot
of overhead for Kerberizing this in his INTEROP class, but can niether find the
info, nor see a clean way thorugh...



Thanks

Robert Moskowitz
Chrysler Corporation
(313) 758-8212
3858921@mcimail.com


Newsgroups: comp.protocols.kerberos
From: ramus@nersc.gov (Joe Ramus)
Subject: Ticket Forwarding
Organization: Internet-USENET Gateway at Stanford University
Date: Wed, 30 Sep 1992 04:06:11 GMT


This seems like an issue that would have been resolved already.
But I have not discovered the solution.  We are using Kerberos 4 and
we want to do "Authentication Forwarding".  I know that Kerberos 5 has
such a capability but we are not ready to use Kerberos 5.

Assume that Host A is my local workstation and I want to use Host B
because it has certain capabilities that I need for my task.  In order
to use the Host B capabilities that I want, I must login on Host B.
No problem.  I just authenticate on Host A and use the Kerberos version
of rlogin or telnet.

But now I do not have a ticket on Host B so if I want to use some
"Kerberized" service I have a dilemma.  I can authenticate on Host B
but that exposes my password over the net.  If available, I could use
a telnet that provides encrypted messages to login on Host B and get a
ticket.  Then I could either turn off the encryption mode (if possible)
or logout and come back with the regular clear text mode.

It seems like there is a "better" way and I would expect that some sites
have done this.  Suppose there is a special server on Host B and a client
on the original Host A.  Host A could send an encrypted message to Host B
with my password.  The server on B could then get a ticket for me and install
it in my private workspace.  Now I can use Host B in the usual way.

I would like to hear from anyone who has done this.
Or else, what is wrong with the idea.

  Joe Ramus  NERSC Livermore  (510) 423-8917   ramus@nersc.gov
Newsgroups: comp.protocols.kerberos
From: tytso@ATHENA.MIT.EDU (Theodore Ts'o)
Subject: Kerberos V5 Beta two released --- FINALLY!!!
Organization: Internet-USENET Gateway at Stanford University
Date: Wed, 30 Sep 1992 21:12:29 GMT

I am pleased to announce the release of the Beta two version of MIT's
Kerberos V5 package.  This release of Kerberos V5 brings our
implementation into full compliance with the current protocol
specification of the Kerberos V5 protocol.  [1]

A large number of things have been changed in this release.  The most
visible change is that this release is *not* compatible with the Beta
1 distribution; some protocol changes were made to the Kerberos V5
spec after Beta 1 was released.  In addition, we took the opportunity
to change the file formats of the keytab files (aka srvtab file) and
the credentials cache (aka ticket file).  The release should represent
the last set of non-compatible changes made to KRB V5; we will use
version number tags and careful file format changes to assure at least
backwards compatibility, should any changes need to be made.

This version also supports preauthentication, so that the KDC can
pre-validate a AS request before it sends you its response containing
the encrypted ticket.  This prevents off-line password attacks which
are otherwise possible.  Each principal has an flag indicating whether
or not preauthentication is required; you may choose to set that flag
for all your users.

One big programming level change that I will mention here is that the
definition of krb5_principal has changed.  Since there wasn't a good
abstraction barrier in place, this caused a lot of code changes.
There is now a set of access functions (defined in
include/krb5/base-defs.h) which your code should use if you need to
look inside of krb5_principal structure.

This version does not include the telnet application.  This is a
temporary thing; the next release will include telnet.  There simply
just wasn't enough time to merge in our changes and clean up the
telnet code.

Also, I've currently only released an minimal set of documentation.
Given the press of time, there wasn't enough time to update the
documentation, and many parts of the documentation were out of date
enough to be confusing.  A more complete set of documentation will
be released shortly.

In order to obtain the release, ftp to ATHENA-DIST.MIT.EDU, and cd to
/pub/kerberos.  Get the file README.KRB5_BETA2.  That file will
contain instructions for obtaining the rest of the Kerberos V5
distribution.

Please send any bugs to krb5-bugs@athena.mit.edu.

Whew!  It's done and finally out the door; what a relief!  I want to
extend my thanks to all of you who have been patiently waiting for Beta
2 to be released.  It's been a long wait, but I hope it will be worth
it.

						- Ted

[1] C. Neumann, J. Kohl, The Kerberos(tm) Network Authentication
	Service (V5).  April, 1992.  Currently released as an Internet Draft.





Newsgroups: comp.protocols.kerberos
From: jtkohl@CS.BERKELEY.EDU (John T Kohl)
Subject: Re: Kerberos V5 ASN.1 observation
Organization: Internet-USENET Gateway at Stanford University
Date: Fri, 2 Oct 1992 15:55:36 GMT

> [2246]  daemon@ATHENA.MIT.EDU (John Linn. LKG1-2/A19. {(508)-486 ) Kerberos 10/02/92 06:39 (39 lines)
> Date: Fri, 2 Oct 92 09:08:00 EDT
> From: John Linn. LKG1-2/A19. {(508)-486 or DTN 226}-7384.  02-Oct-1992 0910 <linn@albeit.enet.dec.com>
> Apparently-To: kerberos@athena.mit.edu

> In looking at the Kerberos V5 ASN.1 and the tagging employed therein, I
> observed a property which I found desirable, though I'm not sure whether
> it was explicitly intentional or arose by fortutious coincidence.  Since
> Kerberos V5 tokens all carry [APPLICATION xx] tags, where xx is
> non-zero,  ...

The APPLICATION xx tags are primarily there to provide disambiguation of
things you receive, particularly for encrypted items which an attacker
might attempt to replace; the tag prevents an attacker from substituting
an encrypted structure of one variety for another.  Steve Bellovin &
Michael Merritt (as mentioned in their recent post) consider this
potential in more detail.

John Kohl
Newsgroups: comp.protocols.kerberos