ACL_DB(5)	      K-Talk by	Xinet (10/14/99	10.1)	     ACL_DB(5)



     NAME    [Toc]    [Back]
	  acl_db - database of Access Control Lists

     DESCRIPTION    [Toc]    [Back]
	  The acl_db file is used by various Xinet programs to grant
	  (or deny) access to various subsystems.  It consists of a
	  series of named ``Access Control Lists'' that	specify
	  AppleTalk and/or IP addresses	and User Accounts that are
	  allowed to use a service.  As	of this	writing, ACLs are used
	  to control access to AppleShare Volumes and the
	  configuration	GUI.

	  The file consists of a sequence of text lines, one list per
	  line,	where each line	looks like:

	       ACL_name:flags:list_item_1[,list_item_N]
	  where	ACL_name is the	reference name,	flags is used by the
	  GUI to control which ACLs are	effective for a	service, and
	  the comma-separated list_items make up the access list.
	  Spaces are allowed, but are significant (i.e.	 always	part
	  of any name).	 The list item sequence	can consist of:

	  Astart:end
	       If access is via	AppleTalk, allow any host in the
	       network range start to end.

	  Hipaddr
	       Allow a host with IP address ipaddr, which can be a
	       name or in standard Internet dot	notation.

	  Nipaddr:mask
	       Allow hosts on IP Network ipaddr	(which must be in dot
	       notation), with mask number of upper bits denoting the
	       network portion of the address.

	  Uname
	       Allow login account name	access.	 If an ACL contains no
	       account items, all users	from access-granted host
	       addresses are allowed access.

	  Lacl Search ACL list acl along with this access list.	 If
	       one ACL has users listed, they do NOT combine with or
	       affect other referenced ACLs.  Once access is granted,
	       sub-ACLs	are ignored.

	  There	are two	pre-defined ACLs that are always available
	  whether or not any ACLs are provided in the database (and if
	  they ARE included in the database, they will be ignored).
	  They are:  <Local Networks> and <No Access> (where the
	  brackets are part of the name).  Services protected by the
	  <Local Networks> ACL will be useable by any AppleTalk	or IP
	  networks directly-connected to the server.  If the <No



     Page 1					    (printed 5/15/100)






     ACL_DB(5)	      K-Talk by	Xinet (10/14/99	10.1)	     ACL_DB(5)



	  Access> ACL is used, the service is effectively disabled.

	  If a service is protected by an ACL, and that	ACL name does
	  not match an entry in	this database, that access control
	  defaults to the <Local Networks> ACL.

     FILES    [Toc]    [Back]
	  /var/adm/appletalk/acl_db















































     Page 2					    (printed 5/15/100)