Plan 9 from Bell Labs’s /usr/web/sources/contrib/arisawa/su/memo

Copyright © 2021 Plan 9 Foundation.
Distributed under the MIT License.
Download the Plan 9 distribution.


H2: Files related to authentication
- /adm/users # cpu server
is he registered?
isn't he a member of noworld?
- /mnt/keys/*/key # auth server
is his key given?
- /lib/ndb/auth # auth server
is he allowed to be authenticated?
- /adm/keys.who
users listed in this file will be seen in /mnt/keys

H2:	case study (su ver1.0a)
H3: su on al
H4: su -p xxxxx alice
su# t
alice          1426    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 894 alice sys 0 Nov  2 16:10 x

OK

H4: su alice
su# t
alice          1434    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 902 arisawa sys 0 Nov  2 16:13 x

H4: su -p xxxxx sho
su: execl: permission denied


H2:	case study (su ver1.0)
H3: su on ar
host: cpu server
method: cpu
executer: bootes

H4: alice
- alice is in /adm/users
- alice has password
- $home is given
- he owns $home

ar% grep alice /adm/users
alice:alice:arisawa:web,arisawa,backup
ar% su -p $p -f $f alice

result: OK

H4: bob

H4: douke
- he is in /adm/users
- he is noworld
- password is not given
- $home is given
- he owns $home

result:
Eve -> douke
Adm -> bootes
douke         17524    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 30028 bootes sys 0 Nov  2 09:42 x


H4: carol
- not in /adm/users
- password is not given
- $home is not given

Eve -> carol
Adm -> bootes

H3: su on al
h
H4: su none
su# t
none           1202    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 805 none sys 0 Nov  2 15:07 x
su# cd
su# touch z
touch: z: cannot create: permission denied

OK, reasonable.

H4: su alice
alice is in /adm/users
alice has password
su# t
alice          1288    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 831 arisawa sys 0 Nov  2 15:44 x

H4: su -p xxxxx alice
alice is in /adm/users
alice has password
su# t
alice          1309    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 839 arisawa sys 0 Nov  2 15:50 x



H4: su bob
bob is not in /adm/users
bos is not in /mnt/keys

su# t
bob            1278    0:00   0:00     184K Pread    ps
--rw-rw-rw- M 823 arisawa sys 0 Nov  2 15:41 x

OK, reasonable.

------------------------

Bell Labs OSI certified Powered by Plan 9

(Return to Plan 9 Home Page)

Copyright © 2021 Plan 9 Foundation. All Rights Reserved.
Comments to [email protected].