Re: [9fans] securing venti and fileservers was: (vac errors after updating to latest p9p archive)

2009-08-17 Thread erik quanstrom
> 0) Venti contains neither authentication nor authorization. If you > care, you are advised to stick it on a trusted network, or listen only > on loopback. > > 1) The venti protocol reserves space for auth (see VtTauth0 and > VtTauth1 in /sys/include/venti.h), but I'm pretty sure nobody > impleme

Re: [9fans] securing venti and fileservers was: (vac errors after updating to latest p9p archive)

2009-08-17 Thread Anthony Sorace
Less of a "here's my experience" than a summary of earlier conversations with various people, but still perhaps relevant or helpful: 0) Venti contains neither authentication nor authorization. If you care, you are advised to stick it on a trusted network, or listen only on loopback. 1) The venti

[9fans] securing venti and fileservers was: (vac errors after updating to latest p9p archive)

2009-08-17 Thread Fernan Bolando
Hi all We have discussed the common setup used by 9fans. Can somebody post there method of securing venti stores. regards fernan -- http://www.fernski.com