HDTenEightyP/NetNews huggingface dataset:
From: gerardi@sdr.slb.com (Paul Gerardi)
Newsgroups: comp.protocols.appletalk
Subject: Re: ownership of spooled lwsrv files
Date: 27 Aug 92 21:31:30 GMT
Organization: Schlumberger

In article <1992Aug21.192520.17542@animal.er.bell.ca>, john@yo_dud.NoSubdomain.NoDomain (John Frame) writes:
> 
> We just recently installed CAP 6.0 pl100 and can now print to
> our Unix printers using lwsrv - it works well.
> 
> My question concerns the printing queue of these jobs.  When
> lpr sends jobs to the queue, the owner is specified and can
> remove his/her own jobs if needed.  However, a job from my
> mac shows up as "root" owner because I suppose that is who
> issued the lwsrv command.  So I cannot remove any accidental
> jobs from the queue because I do not have root access.  Is
> there something I'm missing?  Please excuse my CAP ignorance.
> 
Nope, nothing's missing.  At patch-level 100, the the lpr jobs are forked as
root owned (since lwsrv was running as root).

What you want to get is the patches to bring you up to patch-level 125.

One of the additions is using another lookaside file (called macusers) that
you set up to map all your Chooser names to the correct unix name. The lpr
jobs get setuid() to the unix name, so if you need to you can log into the
unix box and lprm your job. If the Chooser name/unix name entry is not
in the lookaside file...the printer prints out a page that gives the
Mac chooser name, the job name and a "reason why we didn't let you print"
message (from a file you can edit, of course).

Real nifty stuff...

-Paul

----------
Paul Gerardi
Schlumberger-Doll Research
Computing Services
gerardi@sdr.slb.com
Newsgroups: comp.protocols.appletalk
From: lquinta@animal.inescn.pt (Luis Quinta)
Subject: Static IP clients
Organization: INESC Porto
Date: Thu, 27 Aug 92 17:47:42 GMT

Hi folks,

I have a situation that I'm not being able to solve and I hope you can help
me.
I manage an AppleTalk with about 70 nodes and 8 zones. Six of the zones are
connected to a localtalk backbone trough old pluses running AIR2.0. The
seventh (backbone) is connected to ethernet (zone number8) by a Fastpath4
gateway. All AppleTalk services work fine on Local and on EtherTalk.
My users use MacTCP1.1 to run IP based services like Telnet, ftp, etc. All
users in all zones access this services well as long as they use dynamic IP
addresses supplied and managed by FastPath. However only users on backbone
(the localtalk side of the gateway) can use static addresses.
The IP traffic generated by users, with static IP addrs, one hop away from
the gateway cross AIR routers and the FastPath and arrive to the IP
destination host OK but, the replys never get back to the mac on localtalk.

If you gently reply me to lquinta@animal.inescn.pt I'll summarize the
more interesting replys and my conclusion (I hope!) to the net.

Thank you all
Luis Quinta
Newsgroups: comp.protocols.appletalk
From: ohara@leland.Stanford.EDU
Subject: CAP for NeXT
Reply-To: ohara@leland.Stanford.EDU
Organization: DSO, Stanford University
Date: Thu, 3 Sep 92 17:48:29 GMT

Hello,

I want to connect a Mac to a NeXT by using CAP. This is mainly to share a  
NeXT printer with Mac.
Does the latest version of CAP support EtherTalk for NeXT, or will be  
supported soon? If not, what is the best choice for the glue (IPtalk  
sutff, hardware or software)?
Thank you for your attention.

Moriyoshi OHARA (ohara@leland.stanford.edu)
Newsgroups: comp.protocols.appletalk
From: jaapjl@tab00.larc.nasa.gov (J Lee Jaap)
Subject: Re: Some interesting AUFS problems
Organization: AS&M Inc
Date: Wed, 26 Aug 1992 21:01:02 GMT

In article <ROUILJ.92Aug24151134@dl5000.bc.edu> rouilj@dl5000.bc.edu (John P. Rouillard) writes:
   I got CAP 6.0 pl 100 up and running this past weekend (pl 125 will be
   next weekend's project no doubt 8-)) and I am having a few problems
   with setting up/viewing the directories on the Unix box.

A question:  What kind of Unix box?  (Not that I can necessarily help,
but it would help others help you.)  I suggest a followup. :-)

   2) We automount the home directories for users. However, when I
      attempt to AUFS mount the automount point, chooser quits with an
      error #4. Note that the automount directory appears to be a read
      only directory. How do I get this point to mount properly.

Our evidence seems to indicate that AUFS doesn't deal with NFS-mounted
filesystems.  Our workarounds have been to start AUFS on every system
that a Mac user has files on, or to move all the Mac users' home
directories to one system, which then runs AUFS.  We'd also be interested
in any fixes for AUFS for NFS.

Good luck.
--
J Lee Jaap <J.L.Jaap@LaRC.NASA.Gov> +1 804/864-2148
employed by, not speaking for, AS&M Inc, at NASA LaRC, Hampton VA 23681-0001
Newsgroups: comp.protocols.appletalk
From: howard@sinoda.ultra.COM (Howard Simonson)
Subject: Re: Some interesting AUFS problems
Reply-To: howard@ultra.com
Organization: Ultra Network Technologies
Date: Fri, 28 Aug 92 06:51:45 GMT

In article <1992Aug27.175335.10594@ntg.com>, dplatt@ntg.com (Dave Platt) writes:
|> 
|> >Our evidence seems to indicate that AUFS doesn't deal with NFS-mounted
|> >filesystems.  Our workarounds have been to start AUFS on every system
|> >that a Mac user has files on, or to move all the Mac users' home
|> >directories to one system, which then runs AUFS.  We'd also be interested
|> >in any fixes for AUFS for NFS.
|> 
|> My experience was that CAP (pl100) did not work well with NFS-mounted
|> filesystems when running under SunOS 4.1.1.  This was apparently due to
|> some locking-daemon problems in SunOS - both the CAP machine and the
|> NFS-service machine would spit out error messages on their console, and
|> AUFS would not function reliably.  
|> 
|> In SunOS 4.1.2, the locking problems seem to have been fixed.  I'm
|> currently "publishing" several users' home directories to the Mac world
|> via an AUFS server on one machine, which is NFS-automounting the home
|> filesystems on another workstation which is not [yet] running AUFS.

There is a patch available from Sun (its called something like the "NFS Jumbo
Patch") which cures the NFS lock daemon problem present in versions earlier
than 4.1.2, a problem which AUFS seems to hit with great frequency.
-- 
-------------  ----   ----   ----  ----  -----  -----  -- ---------------------
|J -------- |  |   \  |   \  |     |       |    |   |  || |
|  |/\=== | |  |   /  |   /  |     |       |    |   |  || |
|------------- |---   |---   ---   ----    |    |   |  || |    This space
||A          | |      |\     |        |    |    |   |  || |
||    /^\    | |      | \    |        |    |    |   |     |
||   /   \   | |      |  \   ----  ----    |    -----  [] |     for rent.
||  / /|\ \  |____________________________________________|
||  L/_|_\J  |                                            |
-|    )|(    | EM: howard@ultra.com/VM: (408)922-0600 x228|____________________
 |    ---   V| Ultra Network Technologies*101 Daggett Dr*San Jose*CA*95134-2132
 ------------- [ My disclaimer is on file in the main office ]
From: sbk@vax5.cit.cornell.edu
Newsgroups: comp.protocols.appletalk
Subject: Re: MAC Integration 
Date: 2 Sep 92 18:16:07 EDT
Distribution: comp
Organization: Cornell University

Well, the physical answer is, buy and ethernet card for your SE, install it,
and plug it into the network.  You are there.

The protocol answer is more complex.  You can load IPX on your Mac (Dayna sells
this) and then you can log into the Novell file server.  Or you can load the
Mac NLMs on the Novell file server -- it ll then talk AppleTalk -- and your Mac
can log into the Novell server as though it were an AppleShare file server.

Of course, it sounds like you don't just want file services.  It sounds like
you also want to the services that WordPerfect Office offers.  As far as I know
WordPerfect Office is still DOS-only code; last I heard, the Mac version was
still in beta test.  So basically, you would need to log into the Novell server
using one of the two protocol methods outlined above, then load SoftPC on the
SE/30 and run the WordPerfect Office stuff.  Sounds pretty painful and slow and
expensive to me, particularly for the sake of one ancient Mac.  Probably
cheaper to buy an Intel box and put it on desk.

--sk


In article <1992Sep1.194708.18158@unlv.edu>,
gerardo@taj.cs.unlv.edu (Gerry Martinez) writes: 
> How do I hook up a MAC SE on a Novell Ethernet network?  The network is mainly IBM's and at work they told me it could not be done.  We are using Wordperfect Office---Does's WordPerfect make this for the MAC as well?  I would greatly appreciate any help anyone could give me.  Thanks...
>
From: lynne@pacersoft.com (Lynne Chantler)
Newsgroups: comp.protocols.appletalk
Subject: Re: PacerShare & PacerPrint reviews wanted
Date: 1 Sep 92 17:47:33 GMT
X-UserAgent: Nuntius v1.1.1d7
X-XXDate: Tue, 1 Sep 92 18:53:47 GMT

In article <1992Aug22.045551.19424@adobe.com> David Yost, yost@adobe.com

If you are having a problem please contact our excellent technical
support department.  (508) 898-3399 9 am to 7 pm EST.  Or contact us
through our email address pacersupport@pacersoft.com.

Lynne
Newsgroups: comp.protocols.appletalk
From: djh@cs.mu.OZ.AU (David Hornsby)
Subject: Re: CAP6.1 and Publish and Subscribe
Organization: Computer Science, University of Melbourne, Australia
Date: Sat, 29 Aug 1992 10:45:33 GMT

jbotz@mtholyoke.edu (Jurgen Botz) writes:
>The failure of CAP to conform to the AFP requirement that dirIDs be
>constant and unique throughout the lifetime of the volume (filesystem)
>appears to be breaking several recent features of the Mac OS: definitely
>aliases, probably publish & subscribe.  I would say it is time to rethink
>this functionality... anybody working on that already?

The next set of patches for CAP 6.0 will almost certainly include support
for real fixed directory IDs as required by aliases etc. Unfortunately I
can't put a definite date on this, but it will be as soon as possible.

 - David.
Newsgroups: comp.protocols.appletalk
From: bryan@pi.eai.iastate.edu (Bryan Manske)
Subject: Questions concerning CAP6.0pl100
Keywords: CAP60
Reply-To: bryan@pi.eai.iastate.edu (Bryan Manske)
Organization: EAI, Iowa State University, Ames, IA
Date: Fri, 28 Aug 1992 15:05:06 GMT


I have a few questions about setting up a new CAP6.0 install.  Right now it's
not functional yet due to my lack of experience with mac network numbers,
but, if m6y users' mac home directory are on an nfs-EXPORTED partition will
I have problems?  That is to say, the local workstation running CAP sees
the disk as an extent file system, but it's being exported to other 
workstations too.  

Any comments would be appreciated.  Any help with setting up bridge_desc
and etalk.local would be much appreciated, too.  (No, UAB won't do it
for me, it can't grok any useful information out here on our tiny little
leaf node.)

Thanks in advance.

Bryan Manske


-- 
Bryan Manske  (515) 296-9908        . 
Engineering Animation, Inc.         .  Too busy running to turn and fight.
bryan@pi.eai.iastate.edu            . 
#include <caveat_opinion.h>         .                            Me.
#include <standard_disclaimer.h>    . 
Newsgroups: comp.protocols.appletalk
From: obi@gumby.ocs.com (Kuryan "Obi" Thomas)
Subject: Printing with CAP.
Reply-To: obi@gumby.ocs.com
Organization: Online Computer Systems, Inc.
Date: Wed, 26 Aug 1992 01:23:35 GMT

Please forgive me if this is a FAQ -- I don't get this newsgroup.
(Therefore, please email responses.)

I just downloaded CAP6.0 from uunet. Although the file sharing is a great
feature, here's my main need for CAP:

I have a Sun SPARCstation 1+ running SunOS 4.1.1 and a Mac IIci running
System 7.0. The Mac has a 3Com Ethernet board and connects by Thinnet to
the Sun (right now I only use this for NCSA Telnet and A/UX). The Mac is
also connected by a PhoneNet LocalTalk connection to a LaserWriter IINTX.
I have no bridging hardware like GatorBoxes, etc.

Without buying more hardware, can I print from the Sun to the LaserWriter?
I can buy cables and things if necessary, but I don't have the budget for
a GatorBox or FastPath type of thing.

Looking through the documentation, I can't find anything that seems to
answer my question one way or the other. Feel free to tell me to RTFM, but
please indicate what part of TFM to R. Is UAB at all relevant to this
problem?

I'd like to know if I can do what I want before I spend time building and
installing CAP.

Thank you for any and all email responses. If this is indeed a FAQ, would
someone please send me a copy of the FAQ list?
Newsgroups: comp.protocols.appletalk
From: ferch@ucs.ubc.ca (Les Ferch)
Subject: Re: Hooking a PC into an AppleTalk Network
Organization: University of British Columbia, Vancouver, B.C., Canada
Distribution: comp
Date: Fri, 4 Sep 1992 06:22:45 GMT

In <1992Sep3.192313.7728@sura.net> wbarnes@sura.net (Bill Barnes) writes:

>>Depends on what you want to do with the DOS box once it is on the net.  But the
>>basic idea is as follows:  buy a LocalTalk card for the PC, install it, then
>>buy Farallon's PhoneNet Talk (which is the AppleTalk protocol stack for DOS). 
>>Install it on the PC.  This would allow you to log into AppleShare file servers
>>from the PC and to print to AppleTalk-compliant printers on the net (like
>>LaserWriters).  The full AppleTalk stack takes ~190K, so I hope you have a 386
>>with memory management (file services takes about 100K, I forget exactly).

>Can you run PhoneNet Talk on a PC with an Ethernet card rather than a
>Localtalk card?  We've currently got a PC which shares the same Ethernet
>network as our Macs and we'd like it to be able to print to an AppleTalk
>printer, so we'd want the PC to be running Ethertalk, I think.

PhoneNetTalk PC supports a 3Com ethernet card (others?). The new version
may support more cards.
From: woody@ucscb.UCSC.EDU (Bill Woodcock)
Newsgroups: comp.protocols.appletalk
Subject: Re: NBP type field used for routers?
Keywords: NBP, router
Date: 1 Sep 92 06:42:09 GMT
Organization: University of California; Santa Cruz
NNTP-Posting-Host: ucscb.ucsc.edu


          fredette@athena.mit.edu (Matthew H Fredette)
        > I'm working on the software for an AppleTalk router
        > I was wondering what NBP type a router is supposed to be.
        > I don't have any kind of packet sniffing software yet
    
    You don't need a packet analyzer to figure that out.  Just use
    CheckNet or Inter-Poll.  You'll see that every router registers a
    different NBP type, usually its model name.  For instance, my FastPath
    is NBP type "FastPath" while my GatorBox is NBP type "GatorBox"
    (surprise, surprise).
    
    You'll certainly need some kind of peek program to get your router
    working, though.
    
    And start thinking now about whether you want your router to be hard
    seed, soft seed, or come up as an end node, before you get lynched for
    implementing discrepancy-handling wrong.  <grin>
      
                             -Bill Woodcock

________________________________________________________________________________
bill woodcock  woody@zocalo.com  woody@applelink.apple.com  woody@ucscb.ucsc.edu
Newsgroups: comp.protocols.appletalk
From: bcarter@claven.idbsu.edu (Bruce Carter)
Subject: Re: ARA
Organization: Boise State University - CBI Product Development
Date: Wed, 2 Sep 1992 19:11:37 GMT

In article <2378@unet.UUCP> larson@loren.net.com (Alan Larson) writes:
>
>Since I am not an
>APDA member, that would not be a useful source.

There is no APDA membership anymore, anyone can order from them. 
Alternatively, you could look at it as membership is free.
                                     <->
Bruce Carter, CBI Product Development                bcarter@claven.idbsu.edu
Simplot/Micron Instructional Technology Center       amccarte@idbsu (Bitnet)
Boise State University, Boise, ID  83725             (208)385-1851@phone
From: zobkiw@world.std.com (Joe Zobkiw)
Newsgroups: comp.protocols.appletalk
Subject: AFP Anyone?
Date: 30 Aug 92 00:36:45 GMT
Organization: The World Public Access UNIX, Brookline, MA

Hello all...

I am about to endeavour into the world of AFP Servers and the AppleTalk
Filing Protocol. I am about 50% through reading Inside AppleTalk and
the other relavent (sp?) information in IM.

Does anyone have any hints, tips, or C code that they might want to lend?
I'm just curious as to any "gotchas" that might await me. I've written
much AppleTalk code in the past but this is my first time playing with
AFP.

FYI, the application I am working on will need to create and manipulate
files and folders on the AFP Server.

Thanks in advance! :)


-- 
-------------------------------------------------------------
joe zobkiw         zobkiw@world.std.com        aol: aflzobkiw
Newsgroups: comp.protocols.appletalk
From: lquinta@animal.inescn.pt (Luis Quinta)
Subject: Re: Static IP clients (Summary&Thanks)
Organization: INESC Porto
Date: Sat, 29 Aug 92 18:36:20 GMT

There is a very conclusive and final reply by a very well know mac net
man:

>Naturally. If you knew how MacIP (the protocol used between the Macs
>and the gateway) worked, you'd be very surprised that the DYNAMIC
>sessions worked out-of-zone.
>
>The original (i.e. Stanford KIP code) MacIP (from which all others
>derive) is specified, and the ONLY "documented" one (meaning the only
>one for which the source code is available - there are no other
>"official" documents) does not allow Macs to be in a different ZONE to
>the MacIP gateway.
>
>This is because the concept of IP-ARP as used on Ethernet to resolve
>IP addresses to Ethernet addresses has been "mapped" to NBP in
>AppleTalk. NBP is used by both gateways amd Macs to perform a
>zone-wide "NBP LkUp" for the entity "1.2.3.4:IPADDRESS" (if looking
>for IP address "1.2.3.4"). This resolves an IP address to a HARDWARE
>APPLETALK ADDRESS.
>
>Now LkUps in AppleTalk are confined to the one ZONE.
>
>Why does it work for the "dynamic" addresses? Most gateway code has a
>"sneak path" between the Dynamic Address Assignment table and the NBP
>ARP table. Before trying to resolve and IP address to an AppleTalk
>address, the code "sneaks a look" in the Dynamic Address Assignment
>table, and if the mapping is found there, the gateway delivers the
>packet.
>
>Static Hosts don't ask for a dynamic address, therefore the address
>doesn't make it into the table, therefore the gateway can't find the
>Macintosh.
>
>Solutions:
>
>	1. Wait for another few years until the IETF group finally
>	   produces a MacIP "standard" that has an agreed mechanism to
>	   "fix" this non-problem (I'm one of the tardy authors :-),
>	   and then wait more years for it to be implemented in
>	   products,
>
>	2. Change to using all Dynamic addresses,
>
>	3. Change the zone names of the networks requiring Static
>	   addresses to be the same as the one FP's LocalTalk is in.
>
>There's a "good" document (actually a "shock" document - it shows how
>terribly complex it gets if you try to "solve" everyone's problems)
>available at:
>
>> New MacIP document at ftp.is.sandy.novell.com
>> 
>> in "ietf":
>> - [R----F--] cranch             105113       Apr 30 17:51    macip.hqx
>> - [R----F--] cranch             148806       Apr 30 17:51    macip.txt

Thank you very much Tom
Luis Quinta
Newsgroups: comp.protocols.appletalk
From: ckd@eff.org (Christopher Davis)
Subject: Re: CAP6.1 and Publish and Subscribe
Organization: Electronic Frontier Foundation Tech Central
Date: Wed, 2 Sep 1992 18:20:17 GMT

This is probably a naive suggestion, since I have not attempted to grok
the aufs code, but what about a .macdirid file in each directory?  That
way even moving your directory across filesystems won't kill you...
--
Christopher Davis * ckd@eff.org * System Administrator, EFF * +1 617 864 0665
            ``Ed Gruberman, you fail to grasp Ti Kwan Leep.
            Approach me that you might see.'' -- The Master
Newsgroups: comp.protocols.kerberos
From: dean@ksr.com
Subject: Re: New User Accounts
Organization: Internet-USENET Gateway at Stanford University
Date: Wed, 2 Sep 1992 19:33:46 GMT

My thought is that a service key (from the /etc/srvtab) can be used  
to get a ticket and a session key for the "kerberos-SecurID" server.

The securID code would be encrypted using this session key and sent  
to the kerberos-SecurID server, which could authenticate the code and  
change the kerberos password (private key) to be the securID code.

The kerberos-securID server ask the securID server if the code is  
valid, and performs the next code/new pin protocol with the client.  
This communication would be encrypted in the session key obtained  
previously.

When SecurID code is authenticated, the password is changed to the  
securID code, and is changed again in 30 seconds to a random key so  
the old code cannot be reused. (Thus limiting the damage if the real  
code is stolen).

If the SecurID code in not authenticated, the kerberos password  
(private key) is not changed.

The kerberos (re)initialization now proceeds as usual, kerberos sends  
a ticket for the principal encrypted in the principal's current  
kerberos key

Since the workstation has the correct SecurID code, it can decrypt  
the response and obtain the ticket and the new session key only if  
the securID authentication was successful.

I think the only way to compromise this scheme is to steal the  
service key in the /etc/srvtab file and decrypt the communication  
with the kerberos-SecurID server.  If one could do this, one could  
also steal the securID code as it were entered, by replacing the  
login or kinit program.   The problem of capturing good passwords  
with a compromised workstation is not addressed by kerberos, and only  
limited by SecurID by virtue of the changing password.

What say you?

		--Dean

Dean Anderson
KSR Computing Facilities
Kendall Square Research
Newsgroups: comp.protocols.kerberos
From: edso@watson.ibm.com (Edward So)
Subject: Re: Kerberos for DOS and OS/2
Date: Tue, 01 Sep 1992 19:15:27 GMT
Reply-To: edso@watson.ibm.com		
Disclaimer: This posting represents the poster's views, not necessarily those of IBM
Organization: IBM T.J. Watson Research Center

In article <9208311831.AA02251@endor.harvard.edu>, ddl@DAS.HARVARD.EDU (Dan Lanciani) writes:
|> 	There has been some interest in my version of Kerberos for
|> DOS and OS/2, thus, I am working on extracting a distribution from

Is your krb for OS/2 process or thread reentrant?  i.e., is it in a
DLL that can be shared by processes and threads?

-- 
Edward So,  Computing Systems, IBM T.J. Watson Research Center
IBM VNET: EDSO at WATSON       Internet: edso@watson.ibm.com
Newsgroups: comp.protocols.kerberos
From: hughes@logos.ucs.indiana.edu (larry hughes)
Subject: Re: New User Accounts
Organization: University Computing Services News
Date: Wed, 2 Sep 1992 19:53:28 GMT

In article <9209020104.AA25528@windsail.nersc.gov> ramus@nersc.gov (Joe  
Ramus) writes:
> How do other sites manage new accounts and assigned passwords?

At IU, we used a "volunteer" approach.  If you don't volunteer,
you don't get the benefits of using the distributed workstation
services.

We wrote an application that users run from a single timeshared
system (hence we know who they are already).  The program queues
the username (which becomes the principal name) and password
in a secure way, where it is later processed in batch.  I might
add that we obviously maintain a strict dictionary of usernames
across our timeshared systems.  :-)

The batch job performs a kinit to a privileged principal, and
sends the principal name and password (all encrypted of course)
to a server process running on the master Kerberos server.  If
you look in the source for kdb_edit, you'll see that there's
actually very little code required to add a principal into the
Kerberos database.

Cheers,

 //==================================================================\\
||      Larry J. Hughes, Jr.       |        hughes@indiana.edu        || 
||       Indiana University        | "The person who knows everything ||
||  University Computing Services  |        has a lot to learn."      ||
 \\===================================================================//
Newsgroups: comp.protocols.kerberos