Simple access control

Nathan Torkington <Nathan.Torkington@vuw.ac.nz>
Date: Thu, 24 Jun 1993 20:24:55 +1200
From: Nathan Torkington <Nathan.Torkington@vuw.ac.nz>
Message-id: <199306240824.AA23887@kauri.vuw.ac.nz>
To: www-talk@nxoc01.cern.ch
Subject: Simple access control
Which servers have the ability to deny connections based on hostname?
ie
	access	/local/*	*.nz	refuse
	host	/local/*	*	fail

would only allow *.nz access to anything in /local and everyone else
would be refused.

I ask, because it is a simple step to go from this to
	kdomain	/www/sensitive/budget/*	budget
	kdomain	/www/sensitive/staff/*	staff

to define kerberos demesne for files in various locations and do away
entirely with the hostname gumpf.

Nat.