*nix Documentation Project
·  Home
 +   man pages
·  Linux HOWTOs
·  FreeBSD Tips
·  *niX Forums

  man pages->IRIX man pages -> acl_db (4)              


     ACL_DB(5)	      K-Talk by	Xinet (10/14/99	10.1)	     ACL_DB(5)

     NAME    [Toc]    [Back]
	  acl_db - database of Access Control Lists

     DESCRIPTION    [Toc]    [Back]
	  The acl_db file is used by various Xinet programs to grant
	  (or deny) access to various subsystems.  It consists of a
	  series of named ``Access Control Lists'' that	specify
	  AppleTalk and/or IP addresses	and User Accounts that are
	  allowed to use a service.  As	of this	writing, ACLs are used
	  to control access to AppleShare Volumes and the
	  configuration	GUI.

	  The file consists of a sequence of text lines, one list per
	  line,	where each line	looks like:

	  where	ACL_name is the	reference name,	flags is used by the
	  GUI to control which ACLs are	effective for a	service, and
	  the comma-separated list_items make up the access list.
	  Spaces are allowed, but are significant (i.e.	 always	part
	  of any name).	 The list item sequence	can consist of:

	       If access is via	AppleTalk, allow any host in the
	       network range start to end.

	       Allow a host with IP address ipaddr, which can be a
	       name or in standard Internet dot	notation.

	       Allow hosts on IP Network ipaddr	(which must be in dot
	       notation), with mask number of upper bits denoting the
	       network portion of the address.

	       Allow login account name	access.	 If an ACL contains no
	       account items, all users	from access-granted host
	       addresses are allowed access.

	  Lacl Search ACL list acl along with this access list.	 If
	       one ACL has users listed, they do NOT combine with or
	       affect other referenced ACLs.  Once access is granted,
	       sub-ACLs	are ignored.

	  There	are two	pre-defined ACLs that are always available
	  whether or not any ACLs are provided in the database (and if
	  they ARE included in the database, they will be ignored).
	  They are:  <Local Networks> and <No Access> (where the
	  brackets are part of the name).  Services protected by the
	  <Local Networks> ACL will be useable by any AppleTalk	or IP
	  networks directly-connected to the server.  If the <No

     Page 1					    (printed 5/15/100)

     ACL_DB(5)	      K-Talk by	Xinet (10/14/99	10.1)	     ACL_DB(5)

	  Access> ACL is used, the service is effectively disabled.

	  If a service is protected by an ACL, and that	ACL name does
	  not match an entry in	this database, that access control
	  defaults to the <Local Networks> ACL.

     FILES    [Toc]    [Back]

     Page 2					    (printed 5/15/100)

[ Back ]
 Similar pages
Name OS Title
acl IRIX Access Control Lists
acl HP-UX introduction to HFS access control lists
aclv HP-UX introduction to JFS access control lists (ACLs)
acl FreeBSD virtual file system access control lists
dcecp_acl HP-UX A dcecp object that manages DCE access control lists
lsacl HP-UX list access control lists (ACLs) of files
setacl HP-UX modify access control lists (ACLs) for files (JFS File Systems only)
getacl HP-UX list access control lists (ACLs) for files (JFS File Systems only)
swacl HP-UX view or modify the Access Control Lists (ACLs) which protect software products
chacl HP-UX add, modify, delete, copy, or summarize access control lists (ACLs) of files
Copyright © 2004-2005 DeniX Solutions SRL
newsletter delivery service