HDTenEightyP/NetNews huggingface dataset:
From: wha00@johnny-black.NoSubdomain.NoDomain (Bill Angell)
Newsgroups: comp.protocols.appletalk
Subject: Re: why does cap do this?
Date: 9 Oct 92 20:38:28 GMT
Distribution: usa

In article <23577@hacgate.SCG.HAC.COM>, tony@hacgatetony@hacgate.SCG.HAC.COM (Tony Reeves) writes:
|> I have a major problem with cap not working with our unix printer. an imagen
|> 6320 printer. Apples cannot print to the printer, I keep getting and error
|> about an undefined command called F. Yet, if I take the Apple file and print
|> it to a file, then move it to the unix machine and print it, it prints fine. 
|> 
|> I at last figured out that cap is prepending and also substuting code called
|> ProcSets into the apple file. Why does it do this? The printer is postscript
|> and can print a straght apple file, why does cap want to change this? is there
|> a way to tell cap not to change the file, just take it and print it? 
|> 
|> if anyone can help, I really need it...
|> 
|> -- 
|> Why did the Roman Empire Collapse? What is latin for Office Automation?
|> ---- The opitions expressed here are mine and have nothing to do with Hughes
|> Aircraft Co. -- So there! tony@hacgate.hac.com

I'm having the same (almost) problem here.  In my case, I have a QMS 5320 on the 
network and a LaserWriter that's hung off a Sun.  We have a single Mac on the
the network and we are using CAP (pl 126) for printing.

I have a copy of the system 7 ProcSets with the "timeout" code commented out for
CAP to substitute.

When I printed, I saw the undefined F problem.  Working with that for a while, I
found that in the front of the PostScript file there is a comment statement with
the Apple copyright in it.  There is also a copyright symbol character in that 
line which has a value greater that 127 decimal.  If I delete that character,
the undefined F problem goes away. I haven't got a clue why this would affect
anything, but it does.

I still get an "invalidfont" error.  I've checked, and all of the fonts should
be defined.  They are both resident in the printer and downloaded.  This is where
I'm stuck now.

I talked to QMS tech support and sent them the PostScript file.  They had no
problems with it.  They didn't even need to delete the copyright character.

I decided to see what would happen if I printed on the LaserWriter.  The 
workstation that it is attached to didn't have enough space to spool the file,
so I generated a smaller file on the Mac and used that.  I got the same errors
as I got on the QMS!

Unlike tony@hacgate's problem, if I transfer the PostScript file to Unix and use 
LPR to print it, I get the same errors as printing from the Mac (the copyright
character and the timeout stuff was deleted by hand).

If anyone's got any ideas, I'd really appreciate it...

Thanks
Bill
 
-- 
--------------------------------------------------------

Bill Angell                  Phone: (408) 746-7613
Amdahl Corp.              Internet: wha00@css.amdahl.com
Sunnyvale, CA

The opinions expressed herein do not necessarily reflect
those of Amdahl nor would they admit it if they did.

--------------------------------------------------------
Newsgroups: comp.protocols.appletalk
From: DAVISM@kcgl1.eng.ohio-state.edu (Michael T. Davis)
Subject: CAP 6.00 and banner pages under Ultrix
Organization: The Ohio State University
Date: Wed, 7 Oct 1992 17:55:36 GMT


	Does CAP 6.00 pl 125 under Ultrix 4.2a support the lpr -h flag, which
presumably prevents generation of a banner page?  Our queues are setup such
that if=papif and of=papof (or shell scripts wrapped around the appropriate
filter); both filters are used.  When our users use the -h flag, an empty
page is generated.

							Thanks,
							 Mike
--
 Internet: davism@KCGL1.eng.ohio-state.edu |
            -or- DAVISM+@osu.edu           |   These Thoughts, They Be Mine
   BITNET: DAVISM+@OHSTMAIL.BITNET         |
Newsgroups: comp.protocols.appletalk
From: patrick@casbs.Stanford.EDU (Patrick Goebel)
Subject: Re: CAP Appletalk Zones
Organization: Center for Advanced Study in the Behavioral Sciences
Distribution: usa
Date: Thu, 8 Oct 1992 21:37:34 GMT

In article <1asid1INNi0s@cae.cad.gatech.edu> vincent@cad.gatech.edu (Vincent Fox) writes:

> Creation of zones is a function normally reserved for routers.  You
> would create new zones using your friendly Gatorbox, FastPath or
> whatever is currently zoning you.

But suppose you're not using any LocalTalk hardware at all.  For
example, in our situation, we have a Sun CAP server running Native
EtherTalk Phase II over NIT and all Macs connect to the server over an
ethernet card using AppleShare over EtherTalk Phase II.  We are not
connected yet to any other AppleTalk networks.  Is it still possible
to define zones in this situation?

For example, I tried using the line

aarpd le0 "CASBS"

in my `start-cap-servers' script to create a zone called "CASBS".  The
resulting `etalk.local' file echos this zone name in the `thisZone'
field and `atlook' begins its search with the line

Looking for =:=@CASBS ...

which suggests that the CASBS zone has been created.  However,
`getzones' yields the error

error -1096 getting zone list
 
and our Mac clients don't get a choice of zones under AppleShare.  (Of
course, there is only one zone so maybe this is sensible.)  When a CAP
volume is mounted on one of these clients, its path (under Get Info)
begins with zone name "*", not "CASBS".

Is this all because we only have one zone?  Or am I doing something
wrong.

Cheers,
patrick
--
Patrick Goebel                    E-MAIL: patrick@casbs.Stanford.EDU
Network Administrator             VOICE:  (415) 321-2052
CASBS, 202 Junipero Serra Blvd.   FAX:    (415) 321-1192
Stanford, CA 94305                BEEPER: Temporarily Out of Order...
From: tony@hacgate.SCG.HAC.COM (Tony Reeves)
Newsgroups: comp.protocols.appletalk
Subject: why does cap do this?
Date: 8 Oct 92 17:11:21 GMT
Reply-To: tony@hacgate.UUCP (Tony Reeves)
Distribution: usa
Organization: Hughes Aircraft Co., El Segundo, CA

I have a major problem with cap not working with our unix printer. an imagen
6320 printer. Apples cannot print to the printer, I keep getting and error
about an undefined command called F. Yet, if I take the Apple file and print
it to a file, then move it to the unix machine and print it, it prints fine. 

I at last figured out that cap is prepending and also substuting code called
ProcSets into the apple file. Why does it do this? The printer is postscript
and can print a straght apple file, why does cap want to change this? is there
a way to tell cap not to change the file, just take it and print it? 

if anyone can help, I really need it...

-- 
Why did the Roman Empire Collapse? What is latin for Office Automation?
---- The opitions expressed here are mine and have nothing to do with Hughes
Aircraft Co. -- So there! tony@hacgate.hac.com
Newsgroups: comp.protocols.appletalk
From: wyneken@sun1.ruf.uni-freiburg.de (Matthew Wyneken)
Subject: Re: CAP Appletalk Zones
Organization: Rechenzentrum der Universitaet Freiburg, Deutschland
Distribution: usa
Date: Mon, 12 Oct 92 10:47:55 GMT

patrick@casbs.Stanford.EDU (Patrick Goebel) writes:

>But suppose you're not using any LocalTalk hardware at all.  For
>example, in our situation, we have a Sun CAP server running Native
>EtherTalk Phase II over NIT and all Macs connect to the server over an
>ethernet card using AppleShare over EtherTalk Phase II.  We are not
>connected yet to any other AppleTalk networks.  Is it still possible
>to define zones in this situation?

It sounds like you're trying to do what I am. I got things to work just
by doing: 

aarpd le0 "*".


Matthew Wyneken

Deutsches Seminar I          |   Tel.: ++49-761-2034897
Linguistische Informatik     |
Universitaet Freiburg        |   e-mail: 
Friedrichstr. 50             |   mpw@supreme.coling.uni-freiburg.de
-- 
Matthew Wyneken

Deutsches Seminar I          |   Tel.: ++49-761-2034897
Linguistische Informatik     |
Newsgroups: comp.protocols.appletalk
From: mazzucch@ghost.dsi.unimi.it (massimo mazzucchi)
Subject: info
Keywords: info
Organization: Computer Science Dep. - Milan University
Date: Wed, 14 Oct 1992 12:01:49 GMT


Hi

i am Max From Italy

i want know information about communication

I work with HP9000 with o.s. UNIX and X-Term
and if you want to connect with bbs or network
i can use ftp/telnet with

numerical address 146.169.11.3

or        address archie.doc.ic.ac.uk


but if i have the telephon number like 9-008-9998878

in which way i can to connect with these bbs or network?

uucp, cu ? are these that i must use but in which way?


Thanks for your help

Max   mazzucch@ghost.dsi.unimi.it

Xref: sparky comp.protocols.appletalk:3616 comp.sys.mac.comm:10007
From: djh@munnari.OZ.AU (David Hornsby)
Newsgroups: comp.protocols.appletalk,comp.sys.mac.comm
Subject: A Remote Network Server for AppleTalk/Async AppleTalk 2.0
Date: 13 Oct 1992 23:01:12 +1000
Organization: University of Melbourne

I am pleased to announce the release of stage one of "A Remote Network Server"
for AppleTalk.

The ARNS package contains two Macintosh clients; Async AppleTalk 2.0 and
IPRemote AppleTalk which allow suitably connected Macintoshes to access
AppleTalk services via "A Remote Network Server".  The ARNS server runs
on a UNIX host that is connected to an EtherTalk network.

Async AppleTalk uses an asynchronous serial line connection to a UNIX host
(ie: via modem or direct serial line) and a UNIX program called 'async' to
connect to the ARNS server.  IPRemote AppleTalk uses MacTCP 1.1 on an ethernet
equipped Macintosh to achieve similar connectivity.  Connections using either
method may be made over a wide area IP network such as AARNet or the Internet.

Both Async AppleTalk and IPRemote AppleTalk are clients of the Network
Control Panel and are compatible with either System 6.0 or System 7.0.
NB: The Network Control Panel installer software is not included.

The ARNS UNIX server runs under SunOS, DEC ULTRIX 4.N, Sony NEWSOS 4.2 and
SGI IRIX using either Phase 1 or Phase 2 EtherTalk.  Server access may be
restricted with an optional server password and/or an IP address filter list.
The server must be run by a super-user.

The ARNS package is available via anonymous FTP from munnari.OZ.AU
by following the steps ...

	cd mac
	binary
	get arns.tar.Z

Installation instructions are contained in the README file.  User level
documentation can be found in clients/userDoc.hqx (Microsoft Word format).

For demonstration purposes, an open-access server is running on the host
mullala.cs.mu.OZ.AU, the access password is "remote".  The server provides
access to various AppleTalk services including an AppleShare volume and a
LaserWriter spooler.  Feel free to submit print jobs, but please limit the
output to a single page.  Please also keep in mind that the US to Australia
satellite link is 99.99% busy from 0800 to 1800 AEST (ie: 1500 to 0100 PDT).

The ARNS package is Copyright (c) 1992, The University of Melbourne.

For their encouragement I would like to thank Peter Thorne, Iain Morrison,
Chris "Macintosh From Hell" Chaundy, Rodney "Compression" Van Cooten, John
O'Neill, Yasuaki Honda, Matthew Lewis and a squadron of beta testers
unfortunately too numerous to list.

If you have any problems or questions, please email djh@munnari.OZ.AU

 - David.

David Hornsby
Professional Officer                                    djh@munnari.OZ.AU
Department of Computer Science                          +61 3 344 4044
The University of Melbourne, Parkville, 3052, Victoria, Australia.
From: JRowe@cen.ex.ac.uk (J.Rowe)
Newsgroups: comp.protocols.appletalk
Subject: imagewriter on CAP?
Date: 12 Oct 92 16:14:57 GMT
Distribution: comp.protocols.appletalk
Organization: Computer Unit. - University of Exeter. UK

This sounds like it should be a FAQ but it doesn't seem to be in the
FAQ distributed with CAP60pl100. Is there an imagewriter equivalent of
lwserv? More accurately, I'm looking to put an ImagewriterLQ on a
serial port of a sun and make it available to our macs.

Many thanks

John Rowe
Dept. Physics 
Exeter University
UK
Date: Friday, 9 Oct 1992 17:18:34 +01
Newsgroups: comp.protocols.appletalk
Subject: Re: MacTCP with server allocated ip has HUGE delay
From: Andre' Pirard <pirard@vm1.ulg.ac.be>
X-UserAgent: Nuntius v1.1.1d11
X-XXMessage-ID: <A6FB6D7F3B05180A@ampa.segi.ulg.ac.be>
X-XXDate: Fri, 9 Oct 92 16:10:23 GMT
Distribution: world
Organization: Universite' de Lie`ge (Belgium)

In article <bruce-b-091092161543@130.216.34.254> Bruce Benson,
bruce-b@cs.aukuni.ac.nz writes:
>I watched the network traffic using Etherpeek and found that it was only
at
>the end of the huge delay that MacTCP sent out the RARP broadcast packets
>and they were answered in a few seconds.

MacTCP has a definite delay on LocalTalk when it initializes.
When a second program is started, it's init'ed already and delay is null.
So, keeping some server active makes things faster.
It looks like you're on Ethernet, though (RARP). Try anyway.

-----
Andre Pirard          SEGI, Univ. de Li`ge         139.165 IP coordinator
B26 - Sart Tilman     B-4000 Li`ge 1 (Belgium)            +32 (41) 564932
pirard@vm1.ulg.ac.be  alias PIRARD@BLIULG11.BITNET
From: ttang@BNR.CA ("Tak  Tang", T.K.)
Newsgroups: comp.protocols.appletalk
Subject: request for list info-appletalk
Date: 16 Oct 92 10:36:00 GMT
Distribution: world
Organization: The Internet

Hi, 
  I would like to request for list info-appletalk.

Thank you very much,
Tak Tang
From: csirimat@uts.EDU.AU (C Sirimat)
Newsgroups: comp.protocols.appletalk
Subject: RE: NCSA Telnet for PC over Localtalk
Date: 16 Oct 92 13:19:17 GMT
Organization: University of Technology, Sydney
NNTP-Posting-Host: amdahl.ccsd.uts.edu.au
Organisation: University of Technology, Sydney, Australia

In reference to the person trying to run NCSA Telnet over Localtalk,
make sure after you load the appropriate appleshare drivers, you load
COMPAT.COM. COMPAT.COM comes with the Appleshare drivers but is not
automatically set up to run during installation of drivers.

in CONFIG.TEL do the following
SET 
myip=RARP or the appropriate IP number
hardware=appletalk  , 
interrupt=60

delete the following lines
ioaddr=
address=
 
Then make sure your GATEWAY IP is CORRECT for LocalTAlk

I manage to make it work over localtalk with NCSA Telnet versions 2.3b15
and 2.3.03. I read some where that someone managed to do it with version 
2.3b11.

I think your 2.3b5 version will not work no matter how much you try. 
I also happen to have 2.3.05 and it comes up with overflow errors as well
and that is the latest version I have.
From: hendrick@ctron.com (Jim Hendrick)
Newsgroups: comp.protocols.kerberos
Subject: Question Re: Xterminals
Date: 10 Oct 92 14:23:12 GMT
Distribution: comp
Organization: Cabletron Systems Inc.

Hi,
	I am looking for information on the security problems with
using Xterminals to access "realtively secure" machines. By this I
mean machines that act as access points to a database containing
critical resources. These access machines have been physically
"secured" in a minimal sense, locked cabinets, no terminals
considered secure in the /etc/ttytab file including the console. As
part of the duties of several administrators, they are required to log
into these "trusted" machines and occasionally su to root or other
more priviliged accounts. My question relates to the ability (or
inability) to safely use Xterminals to access these "trusted"
machines. Specifically, does anyone know of a way to secure the
transmissions from these Xterminals such that a network "snooper"
could not obtain the cleartext passwords as they fly by? I am moving
towards using Kerberos as the authentication service for these
machines so that one could (from a workstation running K.) use the
encrypted mode of transmission for sensitive login sessions and to
generally keep cleartext passwords off the wire but now I have been
asked to set up Xterminals for the administrative staff to use and
think that this might pose a problem. {whew, how's that for a sentence :-}

Please reply via email any questions, answers, comments or pointers to
further information sources. I will summarize if there appears to be
the desire.

Thanks!!

Jim

--
###########################################################################
### Jim Hendrick (hendrick@ctron.com)   ###                             ###
### Cabletron Systems Inc.              ###   " My opinions, etc are    ###
### P. O. Box 5005                      ### exclusively the property    ###
### Rochester, NH 03867-5005            ### of nobody in particular."   ###
### (603) 332-9400 x1457                ###                             ###
### fax:(603)332-1019                   ###                             ###
###########################################################################
Newsgroups: comp.protocols.kerberos
From: netmgr@tellus.csc.FI (Pekka Kytolaakso)
Subject: Kerberos DES <> MD5
Organization: Centre for Scientific Computing, Finland (CSC)
Date: Wed, 7 Oct 92 11:21:04 GMT

Are there any plans to make Kerberos V5 also use MD5 and not just DES.
If i understand right MD5 has no export restrictions like DES.  Then you
could make a kerberos_export.tar.Z that has the DES-part stripped out.

And example authentication library using MD5 and DES is in the
latest version of xntp: ftp@louie.udel.edu:/pub/ntp/xntp3.tar.Z and
.../xntp3.export.tar.Z.

Pekka Kyt|laakso
--
---------------------------------------------------------------
netmgr@tellus.csc.fi     Centre for Scientific Computing
Pekka.Kytolaakso@csc.fi  PL 40   SF-02101 Espoo FINLAND
Phone: +358 0 4571       Telefax: + 358 0 4572302
From: dyer@spdcc.com (Steve Dyer)
Newsgroups: comp.protocols.kerberos
Subject: Re: Kerberized NFS in 4.4BSD
Date: 8 Oct 92 05:14:38 GMT
Article-I.D.: spdcc.1992Oct8.051438.26122
Organization: S.P. Dyer Computer Consulting, Cambridge MA

In article <9210071559.AA01256@snowhite.cis.uoguelph.ca> root@SNOWHITE.CIS.UOGUELPH.CA (gopher I) writes:
>- The specification of the MIT mechanism is not public either. My
>  understanding is that MIT logs all requests for the info. for Sun and that
>  this suggests that Sun considers some of the provided code/info proprietary.

This comes as a surprise to me; Ted, comments?  Aren't diffs available?

The standard NFS3.2 OEM source is licensed from Sun.  But I'd imagine all the
MIT changes would slide into a public-domain UNIX NFS implementation smoothly
(or at least be obvious to someone who knew what they were doing.)  I can't
imagine that any of the MIT code is proprietary--we're talking extra case
statements in the rpc.mountd dispatch switch statement.  The credentials map
stuff in both rpc.mountd and the kernel is completely self-contained and
completely new code.

You need a kernel hook into rfs_dispatch() or the equivalent to implement the
credentials mapping of the RPC packets before any particular NFS operation
is performed, and a way to add the nfsmapctl() system call to your kernel.
This isn't rocket scientist material.

>It might also be observed
>  that the MIT mechanism is not ideal, but simply the best they could do
>  without making NFS protocol modifications.

Yep, purely mountd protocol additions, and a conservative approach to ensure
interoperability.  In hindsight, it would have been prudent to have made the
effort to reserve these "official" rpc.mountd calls with Sun.

-- 
Steve Dyer
dyer@ursa-major.spdcc.com aka {ima,harvard,rayssd,linus,m2c}!spdcc!dyer
Newsgroups: comp.protocols.kerberos
From: linn@albeit.enet.dec.com (John Linn. LKG1-2/A19. {-486 or DTN 226}-7384.  08-Oct-1992 1147, 508)
Subject: Clarifying preauthentication
Organization: Internet-USENET Gateway at Stanford University
Date: Thu, 8 Oct 1992 15:45:10 GMT

Ted Ts'o said in announcing Kerberos 5 Beta 2: "This version also
supports preauthentication, so that the KDC can pre-validate a AS request
before it sends you its response containing the encrypted ticket.  This
prevents off-line password attacks which are otherwise possible.  Each
principal has an flag indicating whether or not preauthentication is required;
you may choose to set that flag for all your users."  

As I understand the scheme, it doesn't directly prevent off-line password
attacks.  Rather, its real value (and it is real value) is indirect, making it
harder for an attacker to actively acquire the necessary basis against which to
attempt such attacks.  Leaving the hand-held authenticator support hooks aside,
the approach takes a timestamp, encrypts it under the client's key, and
encloses the result in a KRB_AS_REQ message's pa_data.  The KDC returns a
KRB_AS_REP with a TGT if and only if the decrypted timestamp is correct, given
some allowance for clock skew.  This means that it's no longer possible for
someone lacking the proper key to get a corresponding KRB_AS_REP and
incorporated TGT from the KDC "just for the asking". 

If an attacker somehow manages to intercept the KRB_AS_REP which is returned in
response to a valid KRB_AS_REQ, however, it still appears possible for the
attacker to run off-line tests of that KRB_AS_REP (the content of which hasn't
been changed by the advent of preauthentication) against a password dictionary
to find the ill-chosen client key which might have encrypted it. Am I missing
something here?

--jl

Newsgroups: comp.protocols.kerberos
From: edc@iscnvx.lmsc.lockheed.com (Edward Chan)
Subject: Mailing List
Organization: Internet-USENET Gateway at Stanford University
Date: Tue, 13 Oct 1992 17:10:36 GMT

chan@lmsc.lockheed.com
From: alan@curta.cc.columbia.edu (Alan Crosswell)
Newsgroups: comp.protocols.kerberos
Subject: Re: Kerberos DES <> MD5
Date: 7 Oct 92 13:59:57 GMT
Organization: Columbia University

In article <1992Oct7.112104.13517@nic.funet.fi> netmgr@tellus.csc.FI (Pekka  
Kytolaakso) writes:
> Are there any plans to make Kerberos V5 also use MD5 and not just DES.
> If i understand right MD5 has no export restrictions like DES.  Then you
> could make a kerberos_export.tar.Z that has the DES-part stripped out.
> 
> And example authentication library using MD5 and DES is in the
> latest version of xntp: ftp@louie.udel.edu:/pub/ntp/xntp3.tar.Z and
> ..../xntp3.export.tar.Z.
> 
> Pekka Kyt|laakso
> --
> ---------------------------------------------------------------
> netmgr@tellus.csc.fi     Centre for Scientific Computing
> Pekka.Kytolaakso@csc.fi  PL 40   SF-02101 Espoo FINLAND
> Phone: +358 0 4571       Telefax: + 358 0 4572302

I believe that MD5 is patented by RSADSI in the US of A.  It may be used
only under license from RSADSI in this country.  Due to the differences of
US vs. other countries' patent laws, RSADSI does not hold patents for
these same algorithms in most other countries of the world.  This has something
to do with the order in which the paper describing the algorithm and the
patent application are dated.  I believe the paper was published first, which
makes it unpatentable in many countries except the US.  So you can use it
for free in Finland but we can't here.  So instead of an export restriction
barrier, you hit a patent barrier.  Besides, any crypto technology is  
restricted from export.  So, an export license would be necessary for RSA
just as it is for DES and a Captain Midnite Decoder Ring.
/a
From: ggm@brolga.cc.uq.oz.au (George Michaelson)
Newsgroups: comp.protocols.kerberos
Subject: Re: Kerberos 4 on 386BSD and AT&T Unix 5.4
Date: 12 Oct 92 11:20:09 GMT
Organization: Prentice Centre, University of Queensland


Be warned that on some platforms the des library does pass its own
basic tests, but data encrypted by this package may not inter-op with
binary-release code from people like DEC. -We certainly had that problem.

It's pretty clear that something in the eBones/libdes combination is
slightly adrift from the MIT code. Its internally self-consistent so
you can run eBones against itself on multiple platforms and it works
fine. If thats all you need to do, it should be ok.

-George
--
                         George Michaelson
G.Michaelson@cc.uq.oz.au The Prentice Centre      | There's no  market for
                         University of Queensland | hippos in Philadelphia
Phone: +61 7 365 4079    QLD Australia 4072       |          -Bertold Brecht