HDTenEightyP/NetNews huggingface dataset:
From: roy@alanine.phri.nyu.edu (Roy Smith)
Newsgroups: comp.protocols.appletalk
Subject: Re: Getting printing from mac to Sun working
Date: 18 Aug 92 16:28:19 GMT
Organization: Public Health Research Institute (New York)

tom@magnus.acs.ohio-state.edu (Tom Easterday) writes:
> My immediate problem is that lwsrv (if that is the right thing to be doing)
> will not run.  It complains about not begin able to find/use some font files
> or proc files or something like that.

	I don't mean to sound pompus or anything, but can you try and give
us a bit more of a clue?  One of my pet peeves doing "help desk" kind of
stuff is people make you try and guess exactly what they did and what
happened.  What exactly was the error message you got?  How did you run
lwsrv, i.e. what arguments did you give it?  What sort of system are you
running it on?  You said a sparcstation, but what model and what version of
the OS are you running?

	Imagine if you went to the doctor and told him, "sometimes, when I
do something, I get a kind of pain" and expect the doctor to figure out
what's wrong with you.
-- 
roy@wombat.phri.nyu.edu (Roy Smith)
Public Health Research Institute
455 First Avenue, New York, NY 10016, USA
"This never happened to Bart Simpson."
Newsgroups: comp.protocols.appletalk
From: amfahr@taligent.com (Jeff Amfahr)
Subject: Re: LaserWriter NTR
Followup-To: comp.protocols.appletalk
Organization: Taligent
Distribution: Internet
Date: Thu, 20 Aug 1992 03:16:38 GMT

In article <1992Aug19.230432.9427@iscnvx.lmsc.lockheed.com>,
cvogel@iscnvx.lmsc.lockheed.com (Christopher P. Vogel) wrote:
> 
> We have CAP6.0pl100 running on a SPARC2 (SunOS 4.1.1).  When using the
> getzones command, I am able to see every LaserWriter Printer (NTX's, IIg's,
> Plus, etc..), but a LaserWriter NTR.  Does anyone know of something different
> about the Laserwriter NTR that would cause it not to appear from CAP's
> perspective.  Note: The NTR does appear in Chooser on the Mac's. Thanks 
> in advance for any help.
> 
> Chris Vogel
> cvogel@iscnvx.lmsc.lockheed.com
> 
> -- 
> Chris Vogel
> cvogel@iscnvx.lmsc.lockheed.com


The LaserWriter NTR has a known bug which causes it not to accept any
packets which have a non-zero DDP checksum. CAP, by default sends out
packets with checksums. The Mac does not. You need to edit your CAP file to
turn off DDP checksums.

Jeff Amfahr

These opinions are mine. But they can be yours for a price.
From: woody@ucscb.UCSC.EDU (Bill Woodcock)
Newsgroups: comp.protocols.appletalk
Subject: Re: Turbostar stats ?
Date: 18 Aug 92 06:01:43 GMT
Organization: University of California; Santa Cruz
NNTP-Posting-Host: ucscb.ucsc.edu


    Howdy, John.
    
        > It would be nice to produce network use graphs
        > if only we could save the results of repetitive 
        > polls to a file.  We tried capturing a few 
        > thousand "net load" response packets on our 
        > network analyzer and plotting the data.

    I'm sure you've seen or used Farallon's TrafficWatch, or TrafficWatch
    II. It sounds as though that would do what you want.  It basically
    just saves a tab-delimited text file with traffic volume, every X
    seconds.  Import these into a spreadsheet, and you can do whatever you
    want with them.
    
    The AG Group has a product called SkyLine, which isn't out yet, but
    should include all the spreadsheet, statistical analysis, and graphing
    functions that TrafficWatch is missing. If you want them to hurry up,
    call Mahboud, and tell him.  He's writing it.
    
    Both of these require backround processor time on a Mac, however.  If
    you're interested in collecting traffic statistics on multiple
    LocalTalk nets simultaneously, without tying up any Macs, you might
    want to give the folks at Dayna a call, and talk to them about their
    NetScope Probe boxes, which have LocalTalk and Ethernet ports, and a
    little memory, and sit counting packets all day.  You poll them with a
    software front-end called NetScope Console. The product marketing
    manager is Nicole Davis, and I'm sure you could convince her to give
    you a volume discount, if you liked them enough to equip the whole
    campus.  They aren't terribly expensive, anyhow.

    In any case, unless TurboStars are cheaper than StarControllers now,
    it seems like you might be better off sticking with StarControllers...
    They provide a superset of the TurboStar's management features.  And I
    did the StarCommand icons.  :-)  Besides, they only take two-thirds
    the per-pair backboard space, and use a more nearly standard wiring
    scheme on the Amphenol.

                             -Bill

________________________________________________________________________________
bill woodcock  woody@zocalo.com  woody@applelink.apple.com  woody@ucscb.ucsc.edu
Organization: Penn State University
Date: Fri, 14 Aug 1992 20:03:07 EDT
From: <BDS2@psuvm.psu.edu>
Newsgroups: comp.protocols.appletalk
Subject:    Help with TCP/IP on IBM PC running Localtalk on Farrallon cd


Here's my setup: We have a mix of Macs and PCs running over a Farrallon
Phonenet (StarController) with Locatalk. We are connected to a Ethernet
backbone through a Shiva FastPath. The Macs have no trouble communicating
through the FastPath using MacTCP. However, I am having a tough time
trying to get the PCs to do the same.

I have a Farrallon Localtalk card in the IBM PC, and have installed the
UC Davis localtalk driver along with Farrallon software (LSL, ATALK,
LTALKP, COMPAT) and the KA9Q packet driver (LTALKNOS). So far everything
is happy. When I try to ping the PC from a Unixbox on the Ethernet side
of the FastPath, the PC claims it gets the packets and responds. But the
Unixbox claims to never get a response. A Locatalk network traffic program
says the packets are indeed going back and forth.

Also, when I try to ping the Unixbox or a Mac from the IBMPC, *it* never
gets a response. As a matter of fact, the Localtalk network program sees
*no* packets coming to or from the PC.

Anyone have any suggestions for where I should look? I'm at home now
but can get my hands on more technical info back at the office if anyone
would like to communicate with me further. Thanks in advance!

Brett Saylor
ARL Penn State
From: george@mech.seas.upenn.edu
Newsgroups: comp.protocols.appletalk
Subject: enet / phaseII on sun ( quick question )
Date: 18 Aug 92 17:56:26 GMT
Organization: University of Pennsylvania, Mechanical Engineering


my cap ( 6.0, PL thirty-something ) README says i can do phase II
native ethertalk with the nit interface, and that enet support will
be available 'soon'.  Is phase II / native ethertalk via. enet supported
yet? what patch level do i need?*  ( sparc, OS4.01 btw )

*i will probably just apply all 100 or so in any case..

thanks,
george ( @mech.seas.upenn.edu )
From: kavaklis@csd.uch.gr (Kavaklis Yannis )
Newsgroups: comp.protocols.appletalk
Subject: EtherTalk Phase II Router request.
Date: 18 Aug 92 12:27:32 GMT
Organization: Computer Science Department, University of Crete HELLAS

Sory if this is a FAQ, but is there any PD or commercial
software, that allows a sun workstation with 2 ethernet boards
to act as an EtherTalk router, for Phase II Ethertalk??

Thanks in advance.

Yannis Kavaklis
Newsgroups: comp.protocols.appletalk
From: tom@magnus.acs.ohio-state.edu (Tom Easterday)
Subject: Getting rid offending postcript (lwsrv -e)?
Organization: The Ohio State University
Date: Wed, 19 Aug 1992 14:58:14 GMT

According to the lwsrv documentation:

	An alternative to editing the procset files is to make lwsrv
	preprend the following PostScript code that executes the two
	"files" (e.g. stream with 2 eofs) as a single job by running lwsrv
	with the "-e" option (e for eexec may be inline):
	        2 {(%stdin) (r) file cvx exec} repeat
	in front of the job and puts end of file ("%%EOF") after the prologue
	code.  This makes two assumptions:
	        (a) you are using papif without the EOF code turned off
	            (default is off under the NO_STRUCT conditional)
	            or you are using another spooler that handles it
	        (b) You are running without ADOBE_DSC_CONFORMANT turned on.
	At the present time we don't recommend doing this.

I am *not* issuing the "-e" flag and yet there is several sections of
postscript at the top of the file to be printed that my unix system
(or the HP printer) does not like.

At the beginning of the file in the unix print queue are three sections
that when edit'ed out allow the file to be printed fine.  It looks like
the "inline eexec" that is referenced above.  

The sections begin:

   %!PS-Adobe-2.0 Query (and then there is and EOF)

   %!PS-Adobe-2.0 ExitServer (then what looks like printer control, and a EOF)

and then another
   %!PS-Adobe-2.0 Query (and EOF)

then the postscript to be printed

Does anyone know how to get rid of these sections or what I need to do
(other flags with which to start lwsrv) to get this to work?

I have sun IPX running CAP 6.0 and it is passing the print job off to
another sun 2 that has an HP LaserJet III (w/ postscript) hanging off
it.  My mac (IIci) is running system 7.0.1 and is on the same ethernet
as the IPX.

I have started lwsrv so far with the following command:

lwsrv -n "HP III" -p lp -a proc -f LWPlusFonts -T crtolf -l /tmp/lwsrv.log -N

	Thanks in advance for any advice...

			Tom
From: tom@magnus.acs.ohio-state.edu (Tom Easterday)
Newsgroups: comp.protocols.appletalk
Subject: Re: Getting printing from mac to Sun working
Date: 19 Aug 92 15:43:49 GMT
Organization: The Ohio State University

In article <1992Aug19.151748.892@tamsun.tamu.edu> greg@omnivore.tamu.edu (Greg Economides) writes:
>
>You mention transcript.  If you are indeed using transcript (as I am) you
>will probably need to start lwsrv with the three "-T" options to help it
>deal with transcript.  See the lwsrv man page.
>

I tried the above but got the same thing.  The three sections in the top
that I can't print.  I am using an HP instead of an Apple LW so assume
that has something to do with it, the stuff in the file is probably ALW
specific...

	Thanks much for the response,

		Tom
Newsgroups: comp.protocols.appletalk,comp.unix.aux
From: djh@cs.mu.OZ.AU (David Hornsby)
Subject: Re: Does CAP 6.0 work with A/UX 3.0?
Organization: Computer Science, University of Melbourne, Australia
Date: Thu, 13 Aug 1992 05:06:57 GMT

dskeeler@miavx1.acs.muohio.edu (Dennis S. Keeler) writes:
>I'd like to test CAP 6.0 pl 125 on my A/UX 3.0 IIsi before I use it on
>our RSS6000. But the CAP FAQ says it has support for A/UX 2.0, it does not
>mention 3.0. Am I heading for trouble if I try to use CAP with A/UX 3.0?

It worked fine at patch level 100, at least it did here on a Quadra 950.
There are two minor changes to make to the code to keep the compiler happy,
in cap60/applications/lwsrv/lwsrv.c and cap60/applications/aufs/afposenum.c
(change the variable called 'index' to 'idx'). None of the changes to pl 125
should make any difference. I don't have regular access to A/UX 3.0 so if
you make any changes, please send the diffs to cap@munnari.OZ.AU so that the
CAP distribution can be updated.

 - David.
Newsgroups: comp.protocols.kerberos
From: henry@ADS.COM (Henry Mensch)
Subject: is kadmind exportable as a binary? if so, begging letter.
Reply-To: henry@ads.com
Organization: Internet-USENET Gateway at Stanford University
Date: Thu, 13 Aug 1992 16:53:55 GMT

   Date: 13 Aug 92 10:45:47 GMT
   From: jim@cs.strath.ac.uk (Jim Reid)

   [The DoC also doesn't realise that DES is in the Public Domain - it's
   a US Federal standard for f*ck's sake - and there are many openly
   published descriptions and implementations of DES circulating around
   the world.]

the DoC *does* realize that DES is commonly available.  they don't
think that "technically superior" versions which come from the US
should be exported.

you can stop {barfing,laughing} now.

-- h
----
Newsgroups: comp.protocols.kerberos
From: glenz@ocsg.COM (Glen Zorn)
Subject: Re: Alternative network security architectures?
Organization: Internet-USENET Gateway at Stanford University
Date: Thu, 20 Aug 1992 19:06:27 GMT


Folks ~

In <9208201105.AA06504@relay2.UU.NET>, atkinson@tengwar.itd.nrl.navy.mil
(Ran Atkinson) writes:

> Kerberos is in fact protocol-dependent.  You must use their
> protocols.  Your query isn't very clearly phrased. 

He is completely correct; I should have been more specific.  What I *meant* was
"independent of underlying network protocol" i.e., TCP/IP, SNA, etc.  Sorry for 
any confusion.

~ Glen

Glen Zorn	Network Security Analyst
glenz@OCSG.COM	Open Computing Security Group
From: tsudik@pollux.usc.edu (Gene Tsudik)
Newsgroups: comp.protocols.kerberos
Subject: Alternative network security architectures?
Date: 21 Aug 1992 13:59:08 -0700
Organization: University of Southern California, Los Angeles, CA
Distribution: world
NNTP-Posting-Host: pollux.usc.edu

In <9208200042.AA02811@ocsg.COM> Glen Zorn writes:

>>Could anyone point me to information (docs, papers, etc.) on viable, protocol
>>independent alternatives to Kerberos for network security?  Do any exist?

They do exist. One is called KryptoKnight; it has been designed/developed at 
IBM Research (Zurich and Yorktown). You can get a copy of a paper that describes
KryptoKnight by anonymous ftp from jerico.usc.edu. The path is:
pub/gene/kryptoknight.ps.Z

(the paper is to be presented at ESORICS'92) 
Cheers,
Gene

p.s. Feel free to contact me for any additional info. However, I am going on
vacation until August 31st.

-- 
----------------------
Gene Tsudik, Member FDIC
Newsgroups: comp.protocols.kerberos
From: bagate!socrates!bbh7rq5 (Davies)
Subject: Building kerberos 5
Organization: Internet-USENET Gateway at Stanford University
Date: Fri, 21 Aug 1992 16:44:05 GMT


-- 

*******************************************************************************

Chris Davies	                        e-mail: cdavies@socrates.bell-atl.com
Bell Atlantic                            Voice: (301) 989-4111
                                           Fax: (301) 595-1341


Note: If your e-mail reply to me bounces, try sending it explicitly to 
cdavies@socrates.bell-atl.com instead of using the 'reply' feature.
******************************************************************************
Newsgroups: comp.protocols.kerberos
From: whrahe@SOMNET.SANDIA.GOV (William H Rahe)
Subject: Re:  kerberos/nfs for sgi boxes.
Organization: Internet-USENET Gateway at Stanford University
Date: Sat, 22 Aug 1992 22:03:06 GMT

For Version 5 contact Glenn Machin gmachin@somnet.sandia.gov -  Note that 
you will have to make some kernel mods!
From: Joseph_Jackson@transarc.com
Newsgroups: comp.protocols.kerberos
Subject: Re: OSF-kerberos and AFS information sources.
Date: 18 Aug 92 06:36:56 GMT
Organization: Carnegie Mellon, Pittsburgh, PA

Robert,

Transarc Corporation maintains an unmoderated mailing list for those
interested in its AFS product.  Normally, you would send your
subscription request to <info-afs-request@transarc.com>.  I take care
of the mailing list, though, so I'll just add you right now.  To send
mail to the list, address your message to <info-afs@transarc.com>.

In addition, there's a mailing list for discussing AFS/MIT Kerberos
interaction issues.  Mail is sent to this list through
<info-afs-kerberos@transarc.com>.  If you would like to be included on
this mailing list, send mail to <info-afs-kerberos-request@transarc.com>.

I'm not sure if there is a mailing list for DFS.  I'll ask around and
let you know if I find one.

Joe Jackson,
AFS Product Support,
Transarc Corp.
Newsgroups: comp.protocols.kerberos
From: trier@odin.ins.cwru.edu (Stephen C. Trier)
Subject: Re: is kadmind exportable as a binary? if so, begging letter.
Organization: Case Western Reserve University, Cleveland, OH (USA)
Date: Sat, 15 Aug 92 02:40:15 GMT

In article <9208150147.AA08319@easynet.crl.dec.com> kaufman@kibitz.enet.dec.com (Charlie Kaufman) writes:
>Does anyone have any idea how they get away with it?  I'd settle for
>caveated theories.

You might want to read the July Communications of the ACM.  It includes
several articles on cryptography, including the proposed U.S. standard
Digital Signature Standard and U.S. export restrictions on cryptography.

The "Viewpoint" column in this issue, written by William H. Murray,
explains that the regulations in cryptography are specified by the
International Traffic in Arms Regulation of 1943, the Invention Secrecy
Act of 1940, and the National Security Act of 1947.  According to the
column, the ITAR defines all cryptographic equipment and software to
be munitions and therefore subject to export licensing by the State
Department.

-- 
Stephen Trier                      "I am not a lawyer, though I play one
Network Services Engineering        on the net."
CWRU IRIS/INS/Telecom                  Chris Torek, torek@horse.ee.lbl.gov
trier@ins.cwru.edu
From: atkinson@itd.nrl.navy.mil (Randall Atkinson)
Newsgroups: comp.protocols.kerberos
Subject: Re: Looking For Bellovin/Merritt Article On Kerberos
Date: 19 Aug 92 01:10:37 GMT
Organization: Naval Research Laboratory, DC

In article <m#0mgs=.westes@netcom.com> westes@netcom.com (Will Estes) writes:
>Does anyone know of an FTP source for the following reference:
>
>	S.M. Bellovin and M. Merritt, "Limitations of the Kerberos
>Authentication System," Computer Communications Review 20(5), pp.
>119-132 (October 1990).

  I believe that the revised version of the above (appeared in USENIX)
is on research.att.com for anonymous ftp.  I forget which directory so
you'll have to browse a bit -- sorry.

  The above is a very good article and very worth reading.

Ran
atkinson@itd.nrl.navy.mil
Newsgroups: comp.protocols.kerberos
From: bagate!socrates!bbh7rq5 (Davies)
Subject: kerberized xntp
Organization: Internet-USENET Gateway at Stanford University
Date: Wed, 12 Aug 1992 19:38:35 GMT

Hello,

I am looking for a copy of kerberized xntp...

Does anyone know of any?
Where to find it?

Thanks,
Chris

-- 

*******************************************************************************

Chris Davies	                        e-mail: cdavies@socrates.bell-atl.com
Bell Atlantic                            Voice: (301) 989-4111
                                           Fax: (301) 595-1341


Note: If your e-mail reply to me bounces, try sending it explicitly to 
cdavies@socrates.bell-atl.com instead of using the 'reply' feature.
******************************************************************************
Newsgroups: comp.protocols.kerberos
From: westes@netcom.com (Will Estes)
Newsgroups: comp.protocols.kerberos
Subject: Looking For Bellovin/Merritt Article On Kerberos
Date: 18 Aug 92 01:54:18 GMT
Organization: Mail Group

Does anyone know of an FTP source for the following reference:

	S.M. Bellovin and M. Merritt, "Limitations of the Kerberos
Authentication System," Computer Communications Review 20(5), pp.
119-132 (October 1990).

Also, is there some well-known FTP site that is the best source of
information on Kerberos?

Thanks,
Will Estes		Internet: westes@netcom.com
Newsgroups: comp.protocols.kerberos
From: chasman@ATHENA.MIT.EDU
Subject: kerberos/nfs for sgi boxes.
Organization: Internet-USENET Gateway at Stanford University
Date: Thu, 20 Aug 1992 19:28:16 GMT

Hi,
does anybody know of a kerberized nfs modification for personal irises ?
--David Chasman
Newsgroups: comp.protocols.kerberos
From: glenz@ocsg.COM (Glen Zorn)
Subject: Alternative network security architectures?
Organization: Internet-USENET Gateway at Stanford University
Date: Thu, 20 Aug 1992 00:42:59 GMT

Folks ~

Could anyone point me to information (docs, papers, etc.) on viable, protocol 
independent alternatives to Kerberos for network security?  Do any exist? 

Thanks in advance.

~ Glen

Glen Zorn	Network Security Analyst
glenz@OCSG.COM	Open Computing Security Group
Xref: sparky comp.protocols.kerberos:603 alt.security:4192 comp.security.misc:1068
From: ccx009@cch.coventry.ac.uk (Adam Bentley)
Newsgroups: comp.protocols.kerberos,alt.security,comp.security.misc
Subject: Kerberos for NeXT and PC
Date: 20 Aug 92 09:36:53 GMT
Followup-To: poster
Organization: Coventry University


Does anyone know of any available ports of Kerberos for

1. NeXT machines
2. PC's

These must be versions with alternative DES libraries written outside the US
due to current US Government restrictions :-(

If there are versions available without any DES stuff at all, I will 
consider these also..


thanks for any info.

I will post a summary of replies if anyone wishes..
-- 
						_
					       /-\dam

FLESH: Adam Bentley (Fraggle), Systems/Networking, Coventry University. UK
Newsgroups: comp.protocols.kerberos
From: 0003858921@MCIMAIL.COM ("Robert G. Moskowitz")
Subject: OSF-kerberos and AFS information sources.
Organization: Internet-USENET Gateway at Stanford University
Date: Tue, 18 Aug 1992 11:03:00 GMT


I have been an avid follower of this distribution group.  As a result I have a
better feel for where we, as a company, should be headed.  I have MAJOR
corporate politics to deal with (our first production 3172 goes operational this
month after a 11 month sales, education, and planning effort) and so I am
looking toward OSF as a route to interop.

Can anyone here tell me what distribution groups (and where to send the request)
to join for:

        OFS version of Kerberos
        AFS
        OFS version of AFS (DFS, I believe)


Thank you!

Robert Moskowitz
Chrysler Corporation
(313) 758-8212
3858921@mcimail.com

Newsgroups: comp.protocols.kerberos
From: glenz@ocsg.COM (Glen Zorn)
Subject: Re:  Kerberos on non-UNIX systems?
Organization: Internet-USENET Gateway at Stanford University
Date: Fri, 21 Aug 1992 20:58:11 GMT

In message <1992Aug21.175549.18658@unislc.uucp>, unislc!jbb@shelby.MIT.EDU (Joseph Brame_Jr) writes:

>       What non-UNIX implementations of Kerberos exist?
>	  - Mainframe

IBM includes a Kerberos server and client (Version 4) in their new release of
TCP/IP for MVS.  Unfortunately, they don't seem to have any applications (the 
MVS version of telnetd, for instance, is not Kerberized).  I think they also 
have an implementation that runs under VM, but I won't swear to it.


>	  - Mini/Super-Mini

TVG has a version of Kerberos (I've never actually seen it) that runs under 
VAX/VMS.


>	  - Mac

Our company (Open Computing Security Group) has a Mac client for sale.   It 
includes kinit, klist, kdestroy, a Kerberized rlogin client and (real soon 
now) kpasswd and kadmin.


>	  - PC

FTP Software is including (has included?) a Kerberos client in their latest
release of PC/TCP.  OCSG also sells a PC client.


>	  - ...

I don't know if this counts as non-Unix, but our company has a NextStep
I realize that these are all *commercial* implementations, but I hope this 
helps.

~ Glen


Glen Zorn       Network Security Analyst
glenz@OCSG.COM  Open Computing Security Group

Newsgroups: comp.protocols.kerberos
From: ggm@brolga.cc.uq.oz.au (George Michaelson)
Subject: Re: is kadmind exportable as a binary? if so, begging letter.
Organization: Prentice Centre, University of Queensland
Date: Fri, 14 Aug 1992 03:27:31 GMT

henry@ADS.COM (Henry Mensch) writes:

>the DoC *does* realize that DES is commonly available.  they don't
>think that "technically superior" versions which come from the US
>should be exported.

What is particularly bizarre is that the de-regulation of encryption used
for end-user authentication is frequently being hinted at, and for reasons
I stated you can argue most strongly for supporting free access to this
technology, if only to protect existing investment in onshore USA govt funded
works such as NASA and USGS, both of whom have been under sustained attack
from within my part of the internet-at-large.

Thus, I am seeking something which one government instrumentality denys me
from concerns for national security, whilst other government instrumentalities
actively seek it to be made available to me for exactly the same reason...

-George
--
                         George Michaelson
G.Michaelson@cc.uq.oz.au The Prentice Centre      | There's no  market for
                         University of Queensland | hippos in Philadelphia
Phone: +61 7 365 4079    QLD Australia 4072       |          -Bertold Brecht
Newsgroups: comp.protocols.kerberos