[Pipet Devel] Re: Security model

[Jarl van Katwijk]

> > The only problem with remote DL's is that the (local) root DL must
> know about
> > that remote one in order to authoritized it.
>
> Okay, I think we are saying the same thing--that a local dl has to
> accept a connection from a remote dl and get it authorized to use the
> local bl. This will be occuring in a (not yet defined) dl->dl corba
> connection.

Right.

>
>
> > (note: the transported data will be encrypted with the DL password
> as key.)
>
> Man, Jarl, you are awesome! This just helped me figure out a problem I
> was having with secure password storage in the dl. Thanks!
>

N.P. , gonna forward this to a lot of people :-)

>
>
>
> > Maybe this new field of the uriS will make this possible?
> > so it will be like this (simplyfied):
> > struct uriS {
> >    long instaceID;
> >    long groupID; //aint the same as the unix 'group' !!
> >    long subnetID;
> >    long nodeID;
> > };
> >
> > Giving any lead?
>
> Okay, so a group is "smaller" than a instanceID, and groups subnets
> and nodes and not users. Am I following you correctly?
>

Yep!

Sorry about the short answers, kinda buzy @work.