%!PS-Adobe-3.0
%%Creator: groff version 1.09
%%CreationDate: Tue Apr 30 20:44:57 1996
%%DocumentNeededResources: font Times-Roman
%%+ font Times-Bold
%%+ font Times-Italic
%%DocumentSuppliedResources: procset grops 1.09 0
%%Pages: 13
%%PageOrder: Ascend
%%Orientation: Portrait
%%EndComments
%%BeginProlog
%%BeginResource: procset grops 1.09 0
/setpacking where{
pop
currentpacking
true setpacking
}if
/grops 120 dict dup begin
/SC 32 def
/A/show load def
/B{0 SC 3 -1 roll widthshow}bind def
/C{0 exch ashow}bind def
/D{0 exch 0 SC 5 2 roll awidthshow}bind def
/E{0 rmoveto show}bind def
/F{0 rmoveto 0 SC 3 -1 roll widthshow}bind def
/G{0 rmoveto 0 exch ashow}bind def
/H{0 rmoveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/I{0 exch rmoveto show}bind def
/J{0 exch rmoveto 0 SC 3 -1 roll widthshow}bind def
/K{0 exch rmoveto 0 exch ashow}bind def
/L{0 exch rmoveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/M{rmoveto show}bind def
/N{rmoveto 0 SC 3 -1 roll widthshow}bind def
/O{rmoveto 0 exch ashow}bind def
/P{rmoveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/Q{moveto show}bind def
/R{moveto 0 SC 3 -1 roll widthshow}bind def
/S{moveto 0 exch ashow}bind def
/T{moveto 0 exch 0 SC 5 2 roll awidthshow}bind def
/SF{
findfont exch
[exch dup 0 exch 0 exch neg 0 0]makefont
dup setfont
[exch/setfont cvx]cvx bind def
}bind def
/MF{
findfont
[5 2 roll
0 3 1 roll 
neg 0 0]makefont
dup setfont
[exch/setfont cvx]cvx bind def
}bind def
/level0 0 def
/RES 0 def
/PL 0 def
/LS 0 def
/PLG{
gsave newpath clippath pathbbox grestore
exch pop add exch pop
}bind def
/BP{
/level0 save def
1 setlinecap
1 setlinejoin
72 RES div dup scale
LS{
90 rotate
}{
0 PL translate
}ifelse
1 -1 scale
}bind def
/EP{
level0 restore
showpage
}bind def
/DA{
newpath arcn stroke
}bind def
/SN{
transform
.25 sub exch .25 sub exch
round .25 add exch round .25 add exch
itransform
}bind def
/DL{
SN
moveto
SN
lineto stroke
}bind def
/DC{
newpath 0 360 arc closepath
}bind def
/TM matrix def
/DE{
TM currentmatrix pop
translate scale newpath 0 0 .5 0 360 arc closepath
TM setmatrix
}bind def
/RC/rcurveto load def
/RL/rlineto load def
/ST/stroke load def
/MT/moveto load def
/CL/closepath load def
/FL{
currentgray exch setgray fill setgray
}bind def
/BL/fill load def
/LW/setlinewidth load def
/RE{
findfont
dup maxlength 1 index/FontName known not{1 add}if dict begin
{
1 index/FID ne{def}{pop pop}ifelse
}forall
/Encoding exch def
dup/FontName exch def
currentdict end definefont pop
}bind def
/DEFS 0 def
/EBEGIN{
moveto
DEFS begin
}bind def
/EEND/end load def
/CNT 0 def
/level1 0 def
/PBEGIN{
/level1 save def
translate
div 3 1 roll div exch scale
neg exch neg exch translate
0 setgray
0 setlinecap
1 setlinewidth
0 setlinejoin
10 setmiterlimit
[]0 setdash
/setstrokeadjust where{
pop
false setstrokeadjust
}if
/setoverprint where{
pop
false setoverprint
}if
newpath
/CNT countdictstack def
userdict begin
/showpage{}def
}bind def
/PEND{
clear
countdictstack CNT sub{end}repeat
level1 restore
}bind def
end def
/setpacking where{
pop
setpacking
}if
%%EndResource
%%IncludeResource: font Times-Roman
%%IncludeResource: font Times-Bold
%%IncludeResource: font Times-Italic
grops begin/DEFS 1 dict def DEFS begin/u{.001 mul}bind def end/RES 72
def/PL 792 def/LS false def/ENC0[/asciicircum/asciitilde/Scaron/Zcaron
/scaron/zcaron/Ydieresis/trademark/quotesingle/.notdef/.notdef/.notdef
/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef
/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef/.notdef
/.notdef/.notdef/space/exclam/quotedbl/numbersign/dollar/percent
/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen
/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon
/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O
/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/circumflex
/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y
/z/braceleft/bar/braceright/tilde/.notdef/quotesinglbase/guillemotleft
/guillemotright/bullet/florin/fraction/perthousand/dagger/daggerdbl
/endash/emdash/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/hungarumlaut
/dotaccent/breve/caron/ring/ogonek/quotedblleft/quotedblright/oe/lslash
/quotedblbase/OE/Lslash/.notdef/exclamdown/cent/sterling/currency/yen
/brokenbar/section/dieresis/copyright/ordfeminine/guilsinglleft
/logicalnot/minus/registered/macron/degree/plusminus/twosuperior
/threesuperior/acute/mu/paragraph/periodcentered/cedilla/onesuperior
/ordmasculine/guilsinglright/onequarter/onehalf/threequarters
/questiondown/Agrave/Aacute/Acircumflex/Atilde/Adieresis/Aring/AE
/Ccedilla/Egrave/Eacute/Ecircumflex/Edieresis/Igrave/Iacute/Icircumflex
/Idieresis/Eth/Ntilde/Ograve/Oacute/Ocircumflex/Otilde/Odieresis
/multiply/Oslash/Ugrave/Uacute/Ucircumflex/Udieresis/Yacute/Thorn
/germandbls/agrave/aacute/acircumflex/atilde/adieresis/aring/ae/ccedilla
/egrave/eacute/ecircumflex/edieresis/igrave/iacute/icircumflex/idieresis
/eth/ntilde/ograve/oacute/ocircumflex/otilde/odieresis/divide/oslash
/ugrave/uacute/ucircumflex/udieresis/yacute/thorn/ydieresis]def
/Times-Italic@0 ENC0/Times-Italic RE/Times-Bold@0 ENC0/Times-Bold RE
/Times-Roman@0 ENC0/Times-Roman RE
%%EndProlog
%%Page: 1 1
%%BeginPageSetup
BP
%%EndPageSetup
/F0 20/Times-Roman@0 SF(MIT ECA)206.45 164 Q 5(TS)-2.22 G(upplier Ho)-5
E(w-T)-.5 E(o)-1.6 E(The NetMark)221.49 204 Q(et Compan)-.2 E(y)-.3 E
(April 30, 1996)265.39 388 Q .8 LW 82 61 72 61 DL 90 61 80 61 DL 100 61
90 61 DL 110 61 100 61 DL 120 61 110 61 DL 130 61 120 61 DL 140 61 130
61 DL 150 61 140 61 DL 160 61 150 61 DL 170 61 160 61 DL 180 61 170 61
DL 190 61 180 61 DL 200 61 190 61 DL 210 61 200 61 DL 220 61 210 61 DL
230 61 220 61 DL 240 61 230 61 DL 250 61 240 61 DL 260 61 250 61 DL 270
61 260 61 DL 280 61 270 61 DL 290 61 280 61 DL 300 61 290 61 DL 310 61
300 61 DL 320 61 310 61 DL 330 61 320 61 DL 340 61 330 61 DL 350 61 340
61 DL 360 61 350 61 DL 370 61 360 61 DL 380 61 370 61 DL 390 61 380 61
DL 400 61 390 61 DL 410 61 400 61 DL 420 61 410 61 DL 430 61 420 61 DL
440 61 430 61 DL 450 61 440 61 DL 460 61 450 61 DL 470 61 460 61 DL 480
61 470 61 DL 490 61 480 61 DL 500 61 490 61 DL 510 61 500 61 DL 520 61
510 61 DL 530 61 520 61 DL 540 61 530 61 DL 540 61 540 81 DL 540 69 540
89 DL 540 89 540 109 DL 540 109 540 129 DL 540 129 540 149 DL 540 149
540 169 DL 540 169 540 189 DL 540 189 540 209 DL 540 209 540 229 DL 540
229 540 249 DL 540 249 540 269 DL 540 269 540 289 DL 540 289 540 309 DL
540 309 540 329 DL 540 329 540 349 DL 540 349 540 369 DL 540 369 540 389
DL 540 389 540 409 DL 540 409 540 429 DL 540 429 540 449 DL 540 449 540
469 DL 540 469 540 489 DL 540 489 540 509 DL 540 509 540 529 DL 540 529
540 549 DL 540 549 540 569 DL 540 569 540 589 DL 540 589 540 609 DL 540
609 540 629 DL 540 629 540 649 DL 540 649 540 669 DL 540 669 540 689 DL
540 689 540 709 DL 82 709 72 709 DL 90 709 80 709 DL 100 709 90 709 DL
110 709 100 709 DL 120 709 110 709 DL 130 709 120 709 DL 140 709 130 709
DL 150 709 140 709 DL 160 709 150 709 DL 170 709 160 709 DL 180 709 170
709 DL 190 709 180 709 DL 200 709 190 709 DL 210 709 200 709 DL 220 709
210 709 DL 230 709 220 709 DL 240 709 230 709 DL 250 709 240 709 DL 260
709 250 709 DL 270 709 260 709 DL 280 709 270 709 DL 290 709 280 709 DL
300 709 290 709 DL 310 709 300 709 DL 320 709 310 709 DL 330 709 320 709
DL 340 709 330 709 DL 350 709 340 709 DL 360 709 350 709 DL 370 709 360
709 DL 380 709 370 709 DL 390 709 380 709 DL 400 709 390 709 DL 410 709
400 709 DL 420 709 410 709 DL 430 709 420 709 DL 440 709 430 709 DL 450
709 440 709 DL 460 709 450 709 DL 470 709 460 709 DL 480 709 470 709 DL
490 709 480 709 DL 500 709 490 709 DL 510 709 500 709 DL 520 709 510 709
DL 530 709 520 709 DL 540 709 530 709 DL 72 689 72 709 DL 72 669 72 689
DL 72 649 72 669 DL 72 629 72 649 DL 72 609 72 629 DL 72 589 72 609 DL
72 569 72 589 DL 72 549 72 569 DL 72 529 72 549 DL 72 509 72 529 DL 72
489 72 509 DL 72 469 72 489 DL 72 449 72 469 DL 72 429 72 449 DL 72 409
72 429 DL 72 389 72 409 DL 72 369 72 389 DL 72 349 72 369 DL 72 329 72
349 DL 72 309 72 329 DL 72 289 72 309 DL 72 269 72 289 DL 72 249 72 269
DL 72 229 72 249 DL 72 209 72 229 DL 72 189 72 209 DL 72 169 72 189 DL
72 149 72 169 DL 72 129 72 149 DL 72 109 72 129 DL 72 89 72 109 DL 72 69
72 89 DL 72 61 72 81 DL 85.6 64.6 75.6 64.6 DL 86.4 64.6 76.4 64.6 DL
96.4 64.6 86.4 64.6 DL 106.4 64.6 96.4 64.6 DL 116.4 64.6 106.4 64.6 DL
126.4 64.6 116.4 64.6 DL 136.4 64.6 126.4 64.6 DL 146.4 64.6 136.4 64.6
DL 156.4 64.6 146.4 64.6 DL 166.4 64.6 156.4 64.6 DL 176.4 64.6 166.4
64.6 DL 186.4 64.6 176.4 64.6 DL 196.4 64.6 186.4 64.6 DL 206.4 64.6
196.4 64.6 DL 216.4 64.6 206.4 64.6 DL 226.4 64.6 216.4 64.6 DL 236.4
64.6 226.4 64.6 DL 246.4 64.6 236.4 64.6 DL 256.4 64.6 246.4 64.6 DL
266.4 64.6 256.4 64.6 DL 276.4 64.6 266.4 64.6 DL 286.4 64.6 276.4 64.6
DL 296.4 64.6 286.4 64.6 DL 306.4 64.6 296.4 64.6 DL 316.4 64.6 306.4
64.6 DL 326.4 64.6 316.4 64.6 DL 336.4 64.6 326.4 64.6 DL 346.4 64.6
336.4 64.6 DL 356.4 64.6 346.4 64.6 DL 366.4 64.6 356.4 64.6 DL 376.4
64.6 366.4 64.6 DL 386.4 64.6 376.4 64.6 DL 396.4 64.6 386.4 64.6 DL
406.4 64.6 396.4 64.6 DL 416.4 64.6 406.4 64.6 DL 426.4 64.6 416.4 64.6
DL 436.4 64.6 426.4 64.6 DL 446.4 64.6 436.4 64.6 DL 456.4 64.6 446.4
64.6 DL 466.4 64.6 456.4 64.6 DL 476.4 64.6 466.4 64.6 DL 486.4 64.6
476.4 64.6 DL 496.4 64.6 486.4 64.6 DL 506.4 64.6 496.4 64.6 DL 516.4
64.6 506.4 64.6 DL 526.4 64.6 516.4 64.6 DL 536.4 64.6 526.4 64.6 DL
536.4 64.6 536.4 84.6 DL 536.4 65.4 536.4 85.4 DL 536.4 85.4 536.4 105.4
DL 536.4 105.4 536.4 125.4 DL 536.4 125.4 536.4 145.4 DL 536.4 145.4
536.4 165.4 DL 536.4 165.4 536.4 185.4 DL 536.4 185.4 536.4 205.4 DL
536.4 205.4 536.4 225.4 DL 536.4 225.4 536.4 245.4 DL 536.4 245.4 536.4
265.4 DL 536.4 265.4 536.4 285.4 DL 536.4 285.4 536.4 305.4 DL 536.4
305.4 536.4 325.4 DL 536.4 325.4 536.4 345.4 DL 536.4 345.4 536.4 365.4
DL 536.4 365.4 536.4 385.4 DL 536.4 385.4 536.4 405.4 DL 536.4 405.4
536.4 425.4 DL 536.4 425.4 536.4 445.4 DL 536.4 445.4 536.4 465.4 DL
536.4 465.4 536.4 485.4 DL 536.4 485.4 536.4 505.4 DL 536.4 505.4 536.4
525.4 DL 536.4 525.4 536.4 545.4 DL 536.4 545.4 536.4 565.4 DL 536.4
565.4 536.4 585.4 DL 536.4 585.4 536.4 605.4 DL 536.4 605.4 536.4 625.4
DL 536.4 625.4 536.4 645.4 DL 536.4 645.4 536.4 665.4 DL 536.4 665.4
536.4 685.4 DL 536.4 685.4 536.4 705.4 DL 85.6 705.4 75.6 705.4 DL 86.4
705.4 76.4 705.4 DL 96.4 705.4 86.4 705.4 DL 106.4 705.4 96.4 705.4 DL
116.4 705.4 106.4 705.4 DL 126.4 705.4 116.4 705.4 DL 136.4 705.4 126.4
705.4 DL 146.4 705.4 136.4 705.4 DL 156.4 705.4 146.4 705.4 DL 166.4
705.4 156.4 705.4 DL 176.4 705.4 166.4 705.4 DL 186.4 705.4 176.4 705.4
DL 196.4 705.4 186.4 705.4 DL 206.4 705.4 196.4 705.4 DL 216.4 705.4
206.4 705.4 DL 226.4 705.4 216.4 705.4 DL 236.4 705.4 226.4 705.4 DL
246.4 705.4 236.4 705.4 DL 256.4 705.4 246.4 705.4 DL 266.4 705.4 256.4
705.4 DL 276.4 705.4 266.4 705.4 DL 286.4 705.4 276.4 705.4 DL 296.4
705.4 286.4 705.4 DL 306.4 705.4 296.4 705.4 DL 316.4 705.4 306.4 705.4
DL 326.4 705.4 316.4 705.4 DL 336.4 705.4 326.4 705.4 DL 346.4 705.4
336.4 705.4 DL 356.4 705.4 346.4 705.4 DL 366.4 705.4 356.4 705.4 DL
376.4 705.4 366.4 705.4 DL 386.4 705.4 376.4 705.4 DL 396.4 705.4 386.4
705.4 DL 406.4 705.4 396.4 705.4 DL 416.4 705.4 406.4 705.4 DL 426.4
705.4 416.4 705.4 DL 436.4 705.4 426.4 705.4 DL 446.4 705.4 436.4 705.4
DL 456.4 705.4 446.4 705.4 DL 466.4 705.4 456.4 705.4 DL 476.4 705.4
466.4 705.4 DL 486.4 705.4 476.4 705.4 DL 496.4 705.4 486.4 705.4 DL
506.4 705.4 496.4 705.4 DL 516.4 705.4 506.4 705.4 DL 526.4 705.4 516.4
705.4 DL 536.4 705.4 526.4 705.4 DL 75.6 685.4 75.6 705.4 DL 75.6 665.4
75.6 685.4 DL 75.6 645.4 75.6 665.4 DL 75.6 625.4 75.6 645.4 DL 75.6
605.4 75.6 625.4 DL 75.6 585.4 75.6 605.4 DL 75.6 565.4 75.6 585.4 DL
75.6 545.4 75.6 565.4 DL 75.6 525.4 75.6 545.4 DL 75.6 505.4 75.6 525.4
DL 75.6 485.4 75.6 505.4 DL 75.6 465.4 75.6 485.4 DL 75.6 445.4 75.6
465.4 DL 75.6 425.4 75.6 445.4 DL 75.6 405.4 75.6 425.4 DL 75.6 385.4
75.6 405.4 DL 75.6 365.4 75.6 385.4 DL 75.6 345.4 75.6 365.4 DL 75.6
325.4 75.6 345.4 DL 75.6 305.4 75.6 325.4 DL 75.6 285.4 75.6 305.4 DL
75.6 265.4 75.6 285.4 DL 75.6 245.4 75.6 265.4 DL 75.6 225.4 75.6 245.4
DL 75.6 205.4 75.6 225.4 DL 75.6 185.4 75.6 205.4 DL 75.6 165.4 75.6
185.4 DL 75.6 145.4 75.6 165.4 DL 75.6 125.4 75.6 145.4 DL 75.6 105.4
75.6 125.4 DL 75.6 85.4 75.6 105.4 DL 75.6 65.4 75.6 85.4 DL 75.6 64.6
75.6 84.6 DL EP
%%Page: 1 2
%%BeginPageSetup
BP
%%EndPageSetup
EP
%%Page: 1 3
%%BeginPageSetup
BP
%%EndPageSetup
/F0 16/Times-Bold@0 SF(MIT ECA)188.008 103.2 Q 4(TS)-1.52 G(upplier Ho)
-4 E(w-T)-.16 E(o)-1.472 E -.4(Ap)239.976 141.6 S(ril 30, 1996).4 E/F1
10/Times-Roman@0 SF .412(This document describes ho)72 215.4 R 2.912
(was)-.25 G .411(upplier joins the MIT Electronic Catalog \()-2.912 F/F2
10/Times-Bold@0 SF(ECA)A(T)-.95 E F1 2.911(\)s)C .411
(ystem. Before reading)-2.911 F .636(this document, the ne)72 227.4 R
3.136(wE)-.25 G(CA)-3.136 E 3.136(Ts)-1.11 G .636
(upplier should read the)-3.136 F/F3 10/Times-Italic@0 SF(ECA)3.136 E
3.136(TA)-.37 G -1.91 -.37(rc h)-3.136 H(itectur).37 E 3.136(ea)-.37 G
.637(nd Implementation)-3.136 F F1(document,)3.137 E(as well as the)72
239.4 Q F3(ECA)2.5 E 2.5(TU)-.37 G(ser Interface Requir)-2.5 E
(ements Document)-.37 E F1(.)A .958(This document assumes that the ne)72
255.6 R 3.457(wE)-.25 G(CA)-3.457 E 3.457(Ts)-1.11 G .957
(upplier has already created a W)-3.457 F .957(eb interf)-.8 F .957
(ace for \231shopping\232,)-.1 F .156(and that the interf)72 267.6 R
.156(ace is compliant with the guidelines in the)-.1 F F3(ECA)2.656 E
2.656(TU)-.37 G .156(ser Interface Requir)-2.656 F .156(ements Document)
-.37 F F1(.)A .478(The focus of this document is on the back)72 279.6 R
.478(end, and the inte)-.1 F .477
(gration with the MIT security system \(K)-.15 F(erberos)-.25 E(V5\).)72
291.6 Q .111(In the follo)72 307.8 R .111(wing, for ease of e)-.25 F
.111(xposition, it will be assumed that the supplier name is)-.15 F F2
.112(Acme Manufacturing,)2.612 F(Inc.)72 319.8 Q F1 2.688
(and that the supplier softw)5.188 F 2.687
(are \(in particular the transaction daemon\) is to run on the machine)
-.1 F F2(wiley)72 331.8 Q(.acme.com)-.7 E F1(.)A EP
%%Page: 2 4
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o2 N)-.92 H(etMark)-140.34 E(et)-.1 E(Pr)72 756 Q 132.005(eliminary A)
-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195 E EP
%%Page: 3 5
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o3 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 14/Times-Bold@0 SF 3.5
(1. Softwar)72 96 R 3.5(eC)-.252 G(ontents)-3.5 E F0 2.5(1.1. Accounts,)
72 132 R/F2 10/Times-Italic@0 SF(etc.)2.5 E/F3 10/Times-Roman@0 SF 2.994
(At)72 148.2 S .494(est account will be set up for)-2.994 F F0
(acme-user)2.994 E F3 2.994(.Ap)C(assw)-2.994 E .494
(ord for this account will be communicated to you by)-.1 F 2.222
(telephone. In addition, an \231account\232 \(a K)72 160.2 R 2.222
(erberos principal\) for the supplier)-.25 F F2(tr)4.722 E(ansd)-.15 E
F3 2.222(will be created as)4.722 F F0(ecat/wiley)72 172.2 Q
(.acme.com@A)-.7 E(THEN)-.95 E(A.MIT)-.2 E(.EDU)-.9 E F3 3.004(.T)C .504
(he moral equi)-3.004 F -.25(va)-.25 G .504(lent of its passw).25 F .505
(ord is contained in the \214le)-.1 F
(\231v5svrtab\232, which is described belo)72 184.2 Q -.65(w.)-.25 G F0
2.5(1.2. Con\214guration)72 208.2 R(Files)2.5 E F3 -1.1(Yo)72 224.4 S
3.527(uw)1.1 G 1.027(ill be furnished with the follo)-3.527 F 1.027(win\
g con\214guration \214les, which should be installed in \231/etc\232 wi\
th the)-.25 F(indicated protections:)72 236.4 Q/F4 12/Times-Bold@0 SF
(Con\214guration Files)238.494 252.6 Q .4 LW 440.62 257.1 135.38 257.1
DL F2 38.88(\214le mode)135.38 266.6 R(description)15 E 440.62 271.1
135.38 271.1 DL F3 14.73(ecat.conf 444)135.38 280.6 R(ECA)21.66 E 2.5
(Tc)-1.11 G(on\214guration for transd, pro\214led, and spro\214led)-2.5
E 12.5(krb5.conf 444)135.38 292.6 R -.25(Ke)21.66 G
(rberos con\214guration for A).25 E(THEN)-1.11 E(A.MIT)-.35 E(.EDU)-.74
E 16.66(v5srvtab 400)135.38 304.6 R -.25(Ke)21.66 G(rberos V5 serv).25 E
(er tab for transd)-.15 E 2.504(The o)72 325 R 2.504(wner and group sho\
uld be set to match other system con\214guration \214les \(such as /etc\
/hosts or)-.25 F(/etc/syslog.conf\) in \231/etc\232. T)72 337 Q
(ypical o)-.8 E
(wner and group combinations are \231root.root\232, \231root.sys\232,)
-.25 E F2(etc.)2.5 E F0 2.5(1.3. K)72 361 R(erber)-.25 E(os Softwar)-.18
E(e)-.18 E F3 -1.1(Yo)72 377.2 S 2.5(uw)1.1 G(ill be furnished with)-2.5
E F2(at least)2.5 E F3(the follo)2.5 E(wing softw)-.25 E(are:)-.1 E F4
-.3(Ke)239.88 393.4 S(rber).3 E(os Softwar)-.216 E(e)-.216 E 440.295
397.9 135.705 397.9 DL F2 123.32(\214le description)135.705 407.4 R
440.295 411.9 135.705 411.9 DL F3 114.43(/krb5 typical)135.705 421.4 R
(location for K)2.5 E(erberos V5 softw)-.25 E(are)-.1 E(/krb5/bin/)
135.705 445.4 Q(/krb5/include/)135.705 457.4 Q(/krb5/lib/)135.705 469.4
Q 72.75(/krb5/bin/kinit* K)135.705 493.4 R(erberos login)-.25 E 73.86
(/krb5/bin/klist* list)135.705 505.4 R -.25(Ke)2.5 G(rberos tick).25 E
(ets)-.1 E 53.6(/krb5/include/krb5.h K)135.705 529.4 R
(erberos V5 include \214les)-.25 E(/krb5/include/krb5-int.h)135.705
541.4 Q 46.93(/krb5/include/gssapi.h GSS)135.705 553.4 R
(include \214les)2.5 E(/krb5/include/gssapi_generic.h)135.705 565.4 Q
45.82(/krb5/include/pro\214le.h K)135.705 577.4 R
(erberos pro\214le include \214le)-.25 E(/krb5/lib/libcom_err)135.705
601.4 Q 48.04(.a common)-.55 F -.25(Ke)2.5 G(rberos error library).25 E
55.26(/krb5/lib/libcrypto.a crypto)135.705 613.4 R(library)2.5 E 32.48
(/krb5/lib/libgssapi_krb5.a GSS)135.705 625.4 R(library)2.5 E 62.48
(/krb5/lib/libkrb5.a K)135.705 637.4 R(erberos library)-.25 E 54.7
(/krb5/lib/libpro\214le.a K)135.705 649.4 R(erberos pro\214le library)
-.25 E .731(If you wish to de)72 669.8 R -.15(ve)-.25 G .731
(lop your serv).15 F .731
(er on a platform not supported internally by MIT)-.15 F 3.231(,y)-.74 G
.731(ou may ha)-3.231 F 1.031 -.15(ve t)-.2 H 3.231(ob).15 G(uild)-3.431
E -.25(Ke)72 681.8 S .552(rberos from source. The source may be do).25 F
.553(wnloaded from the Athena FTP site. F)-.25 F .553
(or further information,)-.15 F(use anon)72 693.8 Q(ymous FTP to do)-.15
E(wnload the follo)-.25 E(wing \214le:)-.25 E F0(athena-dist.mit.edu)112
710 Q F3(:/pub/k)A(erberos/README.KRB5_BET)-.1 E(A5)-.93 E F0(Pr)72 756
Q 132.005(eliminary A)-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195
E EP
%%Page: 4 6
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o4 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 10/Times-Roman@0 SF -.25(Ke)72
96 S(rberos has been ported to man).25 E 2.5(yp)-.15 G
(latforms, so this should be a relati)-2.5 E -.15(ve)-.25 G
(ly straightforw).15 E(ard task.)-.1 E F0 2.5(1.4. ECA)72 120 R 2.5(TS)
-.95 G(oftwar)-2.5 E(e)-.18 E F1 -1.1(Yo)72 136.2 S 2.5(uw)1.1 G
(ill be furnished with the follo)-2.5 E(wing ECA)-.25 E 2.5(Ts)-1.11 G
(oftw)-2.5 E(are:)-.1 E/F2 12/Times-Bold@0 SF(ECA)223.02 152.4 Q 3(TS)
-1.14 G(oftwar)-3 E 3(eC)-.216 G(ontents)-3 E .4 LW 403.005 156.9
172.995 156.9 DL/F3 10/Times-Italic@0 SF 62.77(\214le description)
172.995 166.4 R 403.005 170.9 172.995 170.9 DL F1 37.21(common/ common)
172.995 180.4 R(thread and gss code)2.5 E 50.54(ksign/ ksign)172.995
192.4 R(binaries)2.5 E 39.99(samples/ v)172.995 204.4 R(arious samples)
-.25 E 47.77(transd/ transaction)172.995 216.4 R(daemon source)2.5 E
(common:)172.995 240.4 Q 55.27(gss.c GSS-related)172.995 252.4 R(code)
2.5 E(gss.h)172.995 264.4 Q(thr)172.995 276.4 Q 57.49(.c thread)-.55 F
(code \(Solaris, Posix, fork\))2.5 E(thr)172.995 288.4 Q(.h)-.55 E
(transd-err)172.995 300.4 Q 29.17(.h error)-.55 F(tables)2.5 E(ksign:)
172.995 324.4 Q(mac/)172.995 336.4 Q(motif/)172.995 348.4 Q(win/)172.995
360.4 Q(ksign/mac:)172.995 384.4 Q 33.6(Ksign.hqx mac)172.995 396.4 R
(ksign code)2.5 E(ksign/motif:)172.995 420.4 Q 48.32(ksign* helper)
172.995 432.4 R(application to "sign" order)2.5 E 38.04
(ksign.uid associated)172.995 444.4 R(UID \214le)2.5 E 48.32
(qsign* quick)172.995 456.4 R(sign test)2.5 E(ksign/win:)172.995 480.4 Q
38.6(ksign.zip win)172.995 492.4 R(3.1 ksign code)2.5 E(samples:)172.995
516.4 Q 38.62(ecat.conf /etc/ecat.conf)172.995 528.4 R 12.5
(mailcap.sample .mailcap)172.995 540.4 R -.15(ve)172.995 552.4 S(ndor)
.15 E 28.2(.cgi* tri)-.55 F(vial CGI Perl program to start ksign)-.25 E
(query)172.995 564.4 Q 37.59(.pl* tri)-.65 F
(vial Perl program to query pro\214led)-.25 E(transd:)172.995 588.4 Q
59.99(123 sample)172.995 600.4 R(order te)2.5 E(xt)-.15 E(Mak)172.995
612.4 Q(e\214le)-.1 E(order)172.995 624.4 Q 47.5(.c sk)-.55 F
(eleton for supplier)-.1 E(-written code)-.2 E 43.61
(transd.c transaction)172.995 636.4 R(daemon)2.5 E(transd.h)172.995
648.4 Q 1.417(The binaries are architecture-speci\214c, ob)72 668.8 R
(viously)-.15 E 3.916(.Y)-.65 G 1.416(ou may de)-5.016 F -.15(ve)-.25 G
1.416(lop serv).15 F 1.416(er softw)-.15 F 1.416(are on an)-.1 F 3.916
(yp)-.15 G 1.416(latform you)-3.916 F .105(wish, b)72 680.8 R .105(ut f\
or client testing you must use one of the MIT Computing Center supporte\
d Unix platforms, W)-.2 F(in-)-.4 E(do)72 692.8 Q(ws 3.1, or MacOs.)-.25
E F0(Pr)72 756 Q 132.005(eliminary A)-.18 F(pril 30, 1996)-.25 E
(Con\214dential)133.195 E EP
%%Page: 5 7
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o5 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 14/Times-Bold@0 SF 3.5
(2. First)72 96 R(Steps to F)3.5 E(ollo)-.35 E(w)-.14 E/F2 10
/Times-Roman@0 SF(This chapter outlines the steps to follo)72 124.2 Q
2.5(wi)-.25 G 2.5(np)-2.5 G(orting the ECA)-2.5 E 2.5(Ts)-1.11 G(oftw)
-2.5 E(are furnished by MIT)-.1 E(.)-.74 E F0 2.5(2.1. Install)72 148.2
R -.25(Ke)2.5 G(rber).25 E(os and Con\214guration Files)-.18 E F2 .553
(On the machine you intend to use for your)72 164.4 R/F3 10
/Times-Italic@0 SF(tr)3.053 E(ansd)-.15 E F2 3.053(,t)C .553(he ECA)
-3.053 F 3.053(Tt)-1.11 G .553(ransaction daemon, install K)-3.053 F
.553(erberos and the)-.25 F(con\214guration \214les as discussed abo)72
176.4 Q -.15(ve)-.15 G(.).15 E F0 2.5(2.2. V)72 200.4 R(erify Connecti)
-1 E(vity with MIT)-.1 E F2 .113(First v)72 216.6 R .113
(erify that you can actually reach the serv)-.15 F .113(ers at MIT)-.15
F 2.613(,b)-.74 G 2.613(yt)-2.613 G .113(elnet'ing to a kno)-2.613 F
.113(wn port on a MIT machine,)-.25 F F3 -.15(e.)72 228.6 S -.15(g.).15
G F2 3.382(,t).15 G .882(he machine supporting the pro\214led at MIT)
-3.382 F 3.382(.T)-.74 G .881
(he hostname and port of this machine are listed in the)-3.382 F .625
([pro\214led] section of \231/etc/ecat.conf\232. If these were, for e)72
240.6 R .625(xample, \231ecat.mit.edu\232 and 7343, then you w)-.15 F
(ould)-.1 E(do the follo)72 252.6 Q(wing:)-.25 E(ar)112 268.8 Q
(gos:~/mit/docs$ telnet)-.18 E F0(ecat.mit.edu 7343)2.5 E F2 -.35(Tr)112
280.8 S(ying 18.177.0.162...).35 E(Connected to ecat.mit.edu.)112 292.8
Q(Escape character is '^]'.)112 304.8 Q F0(acme-user)112 316.8 Q F2 17.5
(username acme)112 328.8 R 12.5(\214rst_name Acme)112 340.8 R 15
(last_name User)112 352.8 R(emplo)112 364.8 Q 12.5(yee_address_1 Acme)
-.1 F(Manuf)2.5 E(acturing, Inc.)-.1 E(emplo)112 376.8 Q 12.5
(yee_address_2 666)-.1 F(An)2.5 E 2.5(yS)-.15 G(treet)-2.5 E(emplo)112
388.8 Q 5(yee_city An)-.1 F(ywhere)-.15 E(emplo)112 400.8 Q 2.5
(yee_state Ne)-.1 F -.25(va)-.25 G(da).25 E(emplo)112 412.8 Q 7.5
(yee_zip 99999)-.1 F(.)114.5 424.8 Q(Connection closed by foreign host.)
112 436.8 Q .686(When you type in your test account name)72 457.2 R F0
(acme-user)3.186 E F2 3.186(,t)C(he)-3.186 E F3(pr)3.186 E(o\214led)-.45
E F2 .686(should return pro\214le information about)3.186 F .025
(this \231user\232, terminated by a '.)72 469.2 R .025
('. If the account is not in the pro\214le database, you will recei)-.7
F .325 -.15(ve o)-.25 H .025(nly a '.).15 F .025('. If this)-.7 F .842(\
should happen, or if you are unable to connect to the hostname and port\
 found in \231/etc/ecat.conf\232, please)72 481.2 R
(contact MIT for assistance before attempting to proceed.)72 493.2 Q
.403(After successfully pinging the)72 509.4 R F3(pr)2.903 E(o\214led)
-.45 E F2 2.903(,y)C .403(ou should v)-2.903 F .403
(erify that you can obtain K)-.15 F .404(erberos tick)-.25 F .404
(ets. First obtain)-.1 F(tick)72 521.4 Q(ets for)-.1 E F0(acme-user)2.5
E F2(,)A F3 -.15(e.)2.5 G -.15(g.).15 G F2(:).15 E 2.5($/)112 537.6 S
(krb5/bin/kinit acme-user)-2.5 E -.15(Pa)112 549.6 S(ssw).15 E
(ord for acme-user@A)-.1 E(THEN)-1.11 E(A.MIT)-.35 E(.EDU: ******)-.74 E
($)112 561.6 Q(Mak)72 582 Q(e)-.1 E F3(absolutely)2.971 E F2 .471
(certain that you use the K)2.971 F .471
(erberos V5 kinit program: other softw)-.25 F .47
(are on your machine may)-.1 F 1.288(include a kinit program.)72 594 R
1.288(Either type the full pathname to K)6.288 F 1.289
(erbero kinit, or type \231which kinit\232 to v)-.25 F(erify)-.15 E
(which v)72 606 Q(ersion you')-.15 E(re running.)-.5 E .072(If you e)72
622.2 R .072(xperience dif)-.15 F .072(\214culties, \214rst mak)-.25 F
2.571(es)-.1 G .071
(ure that \231/etc/krb5.conf\232 is correctly installed: this is ho)
-2.571 F 2.571(wt)-.25 G .071(he kinit)-2.571 F .77
(program locates the K)72 634.2 R .771(erberos KDC. If this does not re\
medy the problem, then your account is apparently)-.25 F
(not set up properly)72 646.2 Q 2.5(,a)-.65 G(nd you should contact MIT\
 for assistance before attempting to proceed further)-2.5 E(.)-.55 E F3
-.92(Yo)72 662.4 S 2.5(um).92 G(ust be r)-2.5 E(oot for the ne)-.45 E
(xt step!)-.2 E F2(Ne)72 678.6 Q .461(xt, we will obtain tick)-.15 F
.461(ets for Acme Manuf)-.1 F(acturing')-.1 E(s)-.55 E F3(tr)2.961 E
(ansd)-.15 E F2 .46(principal. This is normally done as part of a)2.961
F .301(cron job \212 see the)72 690.6 R F3(ECA)2.802 E 2.802(TA)-.37 G
-1.91 -.37(rc h)-2.802 H(itectur).37 E 2.802(ea)-.37 G .302
(nd Implementation)-2.802 F F2 .302(document \212 b)2.802 F .302
(ut we will do this manually no)-.2 F(w)-.25 E(for v)72 702.6 Q
(eri\214cation that the account is set up properly:)-.15 E 2.5(#/)112
718.8 S(krb5/bin/kinit -k ecat/wile)-2.5 E -.65(y.)-.15 G(acme.com@A).65
E(THEN)-1.11 E(A.MIT)-.35 E(.EDU)-.74 E F0(Pr)72 756 Q 132.005
(eliminary A)-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195 E EP
%%Page: 6 8
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o6 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 10/Times-Roman@0 SF .779(If t\
his succeeds, then you are ready to proceed with the subsequent steps. \
If not, you should contact MIT)72 96 R(for assistance.)72 108 Q F0 2.5
(2.3. Building)72 132 R(Sample)2.5 E/F2 10/Times-Italic@0 SF(tr)2.5 E
(ansd)-.15 E F1 .075(Before attempting to customize the sample transact\
ion daemon code furnished by MIT)72 148.2 R 2.576(,i)-.74 G 2.576(ti)
-2.576 G 2.576(sp)-2.576 G .076(robably advis-)-2.576 F(able to v)72
160.2 Q(erify that the sample w)-.15 E(orks on your platform.)-.1 E F0
2.5(2.3.1. Unix)72 184.2 R(mak)2.5 E(e)-.1 E F1 2.583
(Building the sample)72 200.4 R F2(tr)5.083 E(ansd)-.15 E F1 2.583
(code will undoubtedly require some editing of the Mak)5.083 F 2.582
(e\214le supplied as)-.1 F(\231transd/Mak)72 212.4 Q .437
(e\214le\232. If you are unf)-.1 F .437(amiliar with the Unix mak)-.1 F
2.937(eu)-.1 G(tility)-2.937 E 2.937(,y)-.65 G .437
(ou should obtain a cop)-2.937 F 2.937(yo)-.1 G 2.937(ft)-2.937 G .438
(he e)-2.937 F(xcel-)-.15 E(lent O'Reilly book describing \231mak)72
226.4 Q(e\232.)-.1 E/F3 7/Times-Roman@0 SF(1)-4 I F1 .838(Be a)72 242.6
R -.1(wa)-.15 G .838(re that there are man).1 F 3.338(yv)-.15 G .838
(ersions of Unix mak)-3.488 F .838(e. The ECA)-.1 F 3.338(Ts)-1.11 G
(oftw)-3.338 E .838(are you are porting w)-.1 F .837(as b)-.1 F .837
(uilt with)-.2 F(GNU mak)72 254.6 Q 2.5(ew)-.1 G(hich is a)-2.5 E -.25
(va)-.2 G(ilable by anon).25 E(ymous FTP from:)-.15 E F0(pr)112 270.8 Q
(ep.ai.mit.edu)-.18 E F1(:/pub/gnu)A
(At the time of this writing, \231mak)72 291.2 Q(e-3.74.tar)-.1 E
(.gz\232 w)-.55 E(as the most recent v)-.1 E(ersion.)-.15 E F0 2.5
(2.3.2. Thr)72 315.2 R(eading)-.18 E F1(The)72 331.4 Q F2(tr)3.133 E
(ansd)-.15 E F1 .633(is multithreaded so that an)3.133 F 3.133(yn)-.15 G
.633(umber of requests can be handled simultaneously)-3.133 F 3.133(.T)
-.65 G .634(his is impor)-3.133 F(-)-.2 E .76
(tant, since handling a request could in)72 343.4 R -.2(vo)-.4 G(lv).2 E
3.26(ec)-.15 G .76(redit card v)-3.26 F .76
(eri\214cation, which might tak)-.15 F 3.26(e2)-.1 G .76
(0-30 seconds. The)-3.26 F(Mak)72 355.4 Q(e\214le gi)-.1 E -.15(ve)-.25
G 2.5(sy).15 G(ou three choices about multi-threading:)-2.5 E 5<8353>77
371.6 S(olaris threads)-5 E 5<8350>77 383.6 S(osix threads)-5 E 5<836e>
77 395.6 S 2.5(ot)-5 G(hreads,)-2.5 E F2(i.e)2.5 E(.)-.15 E F1 2.5(,e)C
(mulation of threads with fork.)-2.5 E .276
(If you are using a Solaris 2.4 or earlier)72 411.8 R 2.776(,t)-.4 G
.277
(he \214rst choice is appropriate. On Solaris 2.5, or on other machines)
-2.776 F .031
(which support Posix threads, you may choose Posix threads.)72 425.8 R
F3(2)-4 I F1 .03(If your machine does not support threads, you)2.531 4 N
(may emulate threads with fork\(\): this is less ef)72 437.8 Q
(\214cient, b)-.25 E(ut should w)-.2 E(ork satisf)-.1 E(actorily)-.1 E
(.)-.65 E F0 2.5(2.4. Starting)72 461.8 R(Sample)2.5 E F2(tr)2.5 E(ansd)
-.15 E F1 .346(After you ha)72 478 R .646 -.15(ve s)-.2 H .346
(uccessfully b).15 F(uilt)-.2 E F2(tr)2.846 E(ansd)-.15 E F1 2.846(,y)C
.346(ou should v)-2.846 F .345
(erify that it actually runs! This must be done as root,)-.15 F
(with the follo)72 490 Q(wing steps:)-.25 E 12.5(\(1\) Run)77 506.2 R
.259(\231kinit -k\232 for \231ecat/wile)2.759 F -.65(y.)-.15 G
(acme.com@A).65 E(THEN)-1.11 E(A.MIT)-.35 E .259
(.EDU\232 as described abo)-.74 F -.15(ve)-.15 G 2.759(.T).15 G .259
(his is a good)-2.759 F .832
(time to add this command to your root crontab as described in the)
103.66 518.2 R F2(ECA)3.332 E 3.332(TA)-.37 G -1.91 -.37(rc h)-3.332 H
(itectur).37 E 3.331(ea)-.37 G .831(nd Imple-)-3.331 F(mentation)103.66
530.2 Q F1(document.)2.5 E 12.5(\(2\) V)77 546.4 R 1.083(erify that the\
 information in the [transd] section of \231/etc/ecat.conf\232 is corre\
ct. Y)-1.11 F 1.083(ou may wish to)-1.1 F .118(change the def)103.66
558.4 R .118(ault port to follo)-.1 F 2.618(wc)-.25 G(on)-2.618 E -.15
(ve)-.4 G .118(ntions on your machine; in an).15 F 2.617(yc)-.15 G .117
(ase, the port you use should)-2.617 F
(be added to /etc/services, so that it will be reserv)103.66 570.4 Q
(ed for)-.15 E F2(tr)2.5 E(ansd)-.15 E F1(in the future.)2.5 E 12.5
(\(3\) V)77 586.6 R .792(erify that the logging information \(f)-1.11 F
.793(acility and priority\) in the [transd] section is correct: see the)
-.1 F F2(ECA)103.66 598.6 Q 2.5(TA)-.37 G -1.91 -.37(rc h)-2.5 H
(itectur).37 E 2.5(ea)-.37 G(nd Implementation)-2.5 E F1
(document for more information.)2.5 E 12.5(\(4\) T)77 614.8 R .58(ype \
\231./transd -v\232 to start the transaction daemon with logging direct\
ed to stderr)-.8 F 3.08(.\()-.55 G .58(The \231-v\232 option)-3.08 F
(is ob)103.66 626.8 Q
(viously not used when the daemon runs in the background!\))-.15 E -1.1
(Yo)72 643 S 2.5(us)1.1 G(hould see something lik)-2.5 E 2.5(et)-.1 G
(he follo)-2.5 E(wing:)-.25 E .32 LW 76 655.6 72 655.6 DL 80 655.6 76
655.6 DL 84 655.6 80 655.6 DL 88 655.6 84 655.6 DL 92 655.6 88 655.6 DL
96 655.6 92 655.6 DL 100 655.6 96 655.6 DL 104 655.6 100 655.6 DL 108
655.6 104 655.6 DL 112 655.6 108 655.6 DL 116 655.6 112 655.6 DL 120
655.6 116 655.6 DL 124 655.6 120 655.6 DL 128 655.6 124 655.6 DL 132
655.6 128 655.6 DL 136 655.6 132 655.6 DL 140 655.6 136 655.6 DL 144
655.6 140 655.6 DL 148 655.6 144 655.6 DL 152 655.6 148 655.6 DL 156
655.6 152 655.6 DL 160 655.6 156 655.6 DL 164 655.6 160 655.6 DL 168
655.6 164 655.6 DL 172 655.6 168 655.6 DL 176 655.6 172 655.6 DL 180
655.6 176 655.6 DL 184 655.6 180 655.6 DL 188 655.6 184 655.6 DL 192
655.6 188 655.6 DL 196 655.6 192 655.6 DL 200 655.6 196 655.6 DL 204
655.6 200 655.6 DL 208 655.6 204 655.6 DL 212 655.6 208 655.6 DL 216
655.6 212 655.6 DL/F4 5/Times-Roman@0 SF(1)93.6 666 Q/F5 8
/Times-Italic@0 SF(Mana)2 3.2 M(ging Pr)-.08 E(ojects with mak)-.36 E(e)
-.08 E/F6 8/Times-Roman@0 SF 2(,2)C(nd Edition, by Ste)-2 E .24 -.12
(ve T)-.2 H(albot and Andre)-.52 E 2(wO)-.2 G(ram, O'Reilly)-2 E 2(,1)
-.52 G(52 pages, ISBN 0-937175-90-0.)-2 E F4(2)93.6 679.6 Q F6 .847
(Posix threads are supported in user)2.847 3.2 N .848(-space on man)-.16
F 2.848(yp)-.12 G .848
(latforms, in particular as a part of OSF/DCE. There is also a portable)
-2.848 F(user)72 692.4 Q(-space implementation of Posix threads a)-.16 E
-.2(va)-.16 G(ilable by anon).2 E(ymous FTP from)-.12 E/F7 8
/Times-Bold@0 SF(rtfm.mit.edu)2 E F6(:/pub/pthreads.)A F0(Pr)72 756 Q
132.005(eliminary A)-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195 E
EP
%%Page: 7 9
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o7 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 10/Times-Roman@0 SF 2.5(#.)112
96 S(/transd -v)-2.5 E(Oct 13 08:44:26 wile)112 108 Q -.65(y.)-.15 G
(acme.com transd[27954]: T).65 E(ransaction daemon starting up....)-.35
E 27.5(Date Fri)112 120 R(Oct 13 08:44:26 1995)2.5 E 17.5(Hostname wile)
112 132 R -.65(y.)-.15 G(acme.com).65 E 27.5(Port 7333)112 144 R 20
(Service ecat/wile)112 156 R -.65(y.)-.15 G(acme.com@A).65 E(THEN)-1.11
E(A.MIT)-.35 E(.EDU)-.74 E 15(Mechanism {)112 168 R 2.5(135152})2.5 G 15
(Directory /usr/src/ecat/transd)112 180 R(Process id)112 192 Q(27954)15
E(Main tid)112 204 Q(1)20 E(Oct 13 08:44:26 wile)112 228 Q -.65(y.)-.15
G(acme.com transd[27954]: Initializing v).65 E(endor order module)-.15 E
(Oct 13 08:44:26 wile)112 240 Q -.65(y.)-.15 G
(acme.com transd[27954]: Main thread \(tid 1\) entering dispatch loop)
.65 E .231(If you ha)72 260.4 R .531 -.15(ve e)-.2 H .231(nabled loggin\
g correctly \212 with priority set to the maximum of 7 \212 you should \
see the same).15 F(information in a log \214le. See the)72 272.4 Q/F2 10
/Times-Italic@0 SF(ECA)2.5 E 2.5(TA)-.37 G -1.91 -.37(rc h)-2.5 H
(itectur).37 E 2.5(ea)-.37 G(nd Implementation)-2.5 E F1
(document if you ha)2.5 E .3 -.15(ve d)-.2 H(if).15 E(\214culties.)-.25
E F0 2.5(2.5. T)72 296.4 R(esting Sample)-.92 E F2(tr)2.5 E(ansd)-.15 E
F1 -1.1(Yo)72 312.6 S 2.5(uc)1.1 G(an v)-2.5 E(erify that)-.15 E F2(tr)
2.5 E(ansd)-.15 E F1(is accepting connections by typing)2.5 E
(telnet wile)112 328.8 Q -.65(y.)-.15 G(acme.com 7333).65 E -.2(bu)72
349.2 S 2.57(tt).2 G .07(he connection will quickly be dropped, since t\
he protocol is not ascii and since K)-2.57 F .07(erberos authentication)
-.25 F(and encryption are required.)72 361.2 Q F0 2.5(2.5.1. Quick)72
385.2 R -.92(Te)2.5 G(st).92 E F1 .555(The ECA)72 401.4 R 3.055(Ts)-1.11
G(oftw)-3.055 E .556(are directory includes the program \231qsign\232 i\
n the \231ksign/motif\232 directory)-.1 F 3.056(.T)-.65 G .556
(his will allo)-3.056 F(w)-.25 E(you to quickly test the)72 413.4 Q F2
(tr)2.5 E(ansd)-.15 E F1(independently of your WWW bro)2.5 E(wser)-.25 E
2.5(.D)-.55 G 2.5(ot)-2.5 G(he follo)-2.5 E(wing:)-.25 E 12.5(\(1\) As)
77 429.6 R 2.5(an)2.5 G(on-root user)-2.5 E 2.5(,g)-.4 G(et K)-2.5 E
(erberos tick)-.25 E(ets for)-.1 E F0(acme-user)2.5 E F1
(\(as described abo)2.5 E -.15(ve)-.15 G 2.5(\)b).15 G 2.5(yr)-2.5 G
(unning kinit.)-2.5 E 12.5(\(2\) In)77 445.8 R 1.12
(the directory from which)3.62 F F2(tr)3.62 E(ansd)-.15 E F1 -.1(wa)3.62
G 3.62(ss).1 G 1.119(tarted, v)-3.62 F 1.119
(erify that there is a dummy order te)-.15 F 1.119(xt \214le,)-.15 F F2
-.15(e.)3.619 G -.15(g.).15 G F1(,).15 E(\231123\232. \(An)103.66 457.8
Q 2.5(ya)-.15 G(scii \214le at all will do.\))-2.5 E 12.5(\(3\) Ex)77
474 R(ecute the follo)-.15 E(wing command:)-.25 E(qsign wile)143.66
490.2 Q -.65(y.)-.15 G(acme.com 7333 ecat@wile).65 E -.65(y.)-.15 G
(acme.com "{ 1 3 5 1 5 2 }" 123).65 E(The)72 510.6 Q F2(qsign)2.871 E F1
.371(program should return the te)2.871 F .371(xt from the \214le \2311\
23\232. If there are problems, error messages will be)-.15 F
(printed on both the client and serv)72 522.6 Q(er side.)-.15 E(The)72
538.8 Q F2(qsign)2.929 E F1 .429
(program will pause after returning the te)2.929 F .428(xt, w)-.15 F
.428(aiting for you to hit)-.1 F F0(CR)2.928 E F1 .428
(and \231sign\232 the order)2.928 F 2.928(.T)-.55 G(his)-2.928 E 1.635
(should return a \231Thank-Y)72 550.8 R 1.636
(ou\232 message with the ProCard number of acme-user)-1.1 F 4.136(.T)
-.55 G 1.636(he ProCard number is)-4.136 F .086(obtained from the)72
562.8 R F2(spr)2.586 E(o\214led)-.45 E F1 .085(running at MIT on the ho\
st and port indicated in the \214le \231/etc/ecat.conf\232. Ag)2.586 F
(ain,)-.05 E(if there are problems, error messages will be printed out \
on both the client and serv)72 574.8 Q(er side.)-.15 E F0 2.5(2.5.2. Br)
72 598.8 R -.1(ow)-.18 G(ser T).1 E(est)-.92 E F1 .998(Once you ha)72
615 R 1.298 -.15(ve ve)-.2 H .998(ri\214ed that).15 F F2(tr)3.498 E
(ansd)-.15 E F1 -.1(wo)3.498 G .998(rks correctly using).1 F F2(qsign)
3.498 E F1 3.498(,i)C 3.498(ts)-3.498 G .998(hould be relati)-3.498 F
-.15(ve)-.25 G .998(ly straightforw).15 F .998(ard to)-.1 F(start the)72
627 Q F2(ksign)2.5 E F1(helper application from your bro)2.5 E(wser)-.25
E 2.5(.D)-.55 G 2.5(ot)-2.5 G(he follo)-2.5 E(wing:)-.25 E 12.5(\(1\) v)
77 643.2 R .57(erify that ksign and ksign.uid are installed in your P)
-.15 F -1.11(AT)-.92 G 3.069(Ha)1.11 G .569(nd UIDP)-3.069 F -1.11(AT)
-.92 G .569(H. See the)1.11 F F2(ECA)3.069 E 3.069(TA)-.37 G -1.91 -.37
(rc h)-3.069 H(itec-).37 E(tur)103.66 655.2 Q 2.5(ea)-.37 G
(nd Implementation)-2.5 E F1(if you ha)2.5 E .3 -.15(ve q)-.2 H
(uestions about this.).15 E 12.5(\(2\) v)77 671.4 R .1(erify that a mai\
lcap in your mailcap \231path\232 with an entry for \231te)-.15 F 2.6
(xt/ksign\232. See)-.15 F(the)2.6 E F2(ECA)2.6 E 2.6(TA)-.37 G -1.91
-.37(rc h)-2.6 H(itec-).37 E(tur)103.66 683.4 Q 3.066(ea)-.37 G .566
(nd Implementation)-3.066 F F1 .566(and your bro)3.066 F .566
(wser documentation for information, b)-.25 F .566
(ut $\(HOME\)/.mailcap)-.2 F(is typically in the path.)103.66 695.4 Q
12.5(\(3\) create)77 711.6 R 3.452(at)3.452 G(ri)-3.452 E .952
(vial CGI program to in)-.25 F -.2(vo)-.4 G 1.152 -.1(ke t).2 H .952
(he ksign program. See the).1 F F2(ECA)3.452 E 3.452(TA)-.37 G -1.91
-.37(rc h)-3.452 H(itectur).37 E 3.452(ea)-.37 G .952(nd Imple-)-3.452 F
(mentation)103.66 723.6 Q F1 1.025(for details, b)3.525 F 1.025
(ut placing the the follo)-.2 F 1.024
(wing Perl program in your ~/.public_html directory)-.25 F F0(Pr)72 756
Q 132.005(eliminary A)-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195
E EP
%%Page: 8 10
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o8 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 10/Times-Roman@0 SF(should w)
103.66 96 Q(ork:)-.1 E(Content-type: te)143.66 112.2 Q(xt/ksign)-.15 E
(wile)143.66 136.2 Q -.65(y.)-.15 G(acme.com7333ecat@wile).65 E -.65(y.)
-.15 G(acme.com{ 1 3 5 1 5 2 }123).65 E 12.5(\(4\) access)77 156.6 R
(the CGI program from your bro)2.5 E(wser)-.25 E(.)-.55 E(Ev)72 172.8 Q
(erything should no)-.15 E 2.5(ww)-.25 G(ork, just as it did in the)-2.6
E/F2 10/Times-Italic@0 SF(qsign)2.5 E F1(test.)2.5 E F0(Pr)72 756 Q
132.005(eliminary A)-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195 E
EP
%%Page: 9 11
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -116.78 140.34
(o9 N)-.92 H(etMark)-140.34 E(et)-.1 E/F1 14/Times-Bold@0 SF 3.5
(3. Writing)72 96 R -.35(yo)3.5 G(ur o).35 E(wn transd)-.14 E/F2 10
/Times-Roman@0 SF(No)72 124.2 Q 2.572(wt)-.25 G .073(hat you ha)-2.572 F
.373 -.15(ve s)-.2 H .073(uccessfully v).15 F .073
(eri\214ed that the sample)-.15 F/F3 10/Times-Italic@0 SF(tr)2.573 E
(ansd)-.15 E F2 -.1(wo)2.573 G .073(rks in your en).1 F .073
(vironment, you are ready to)-.4 F(write your o)72 136.2 Q(wn)-.25 E F3
(tr)2.5 E(ansd)-.15 E F2 2.5(.T)C
(his chapter lists some of the issues which you must confront.)-2.5 E F0
2.5(3.1. Order)72 160.2 R(Handoff fr)2.5 E(om CGI to transd)-.18 E F2
.627(During the process of b)72 176.4 R .627
(uilding the order \212 or \214lling the \231shopping bask)-.2 F .627
(et\232 as man)-.1 F 3.127(yW)-.15 G .626(eb sites say \212 the)-3.927 F
.557(order contents are k)72 188.4 R .558
(ept in a temporary \214le or database entry)-.1 F 3.058(.E)-.65 G
(xactly)-3.058 E F3(how)3.058 E F2 .558
(this is done is transparent to the)3.058 F(ECA)72 200.4 Q 2.762(Tu)
-1.11 G(ser)-2.762 E 2.762(.H)-.55 G -.25(ow)-2.762 G -2.15 -.25(ev e)
.25 H 1.062 -.4(r, w).25 H .262(hen the ECA).4 F 2.762(Tu)-1.11 G .262
(ser clicks)-2.762 F F3(Done)2.762 E F2 2.762(,o)C 2.762(ri)-2.762 G
.262(ts moral equi)-2.762 F -.25(va)-.25 G .261
(lent, the order contents must be).25 F(gi)72 212.4 Q -.15(ve)-.25 G 2.5
(nau).15 G(nique name \212 the)-2.5 E F0(order number)2.5 E F2 2.5<8a61>
2.5 G(nd these contents must be made accessible to the)-2.5 E F3(tr)2.5
E(ansd)-.15 E F2(.)A .408(This could be done in an)72 228.6 R 2.908(yn)
-.15 G .408(umber of w)-2.908 F .408(ays. Placing the order contents in\
 a \214le named \231order number\232 in a)-.1 F 2.229(special directory\
 of \231unsigned\232 orders is one simple solution: this is precisely w\
hat the sample code)72 240.6 R(assumes.)72 252.6 Q F0 2.5(3.2. Starting)
72 276.6 R(the ksign Pr)2.5 E(ogram)-.18 E F2 .863
(On the client side control passes from the non-secure bro)72 292.8 R
.864(wser to the secure ksign program in a relati)-.25 F -.15(ve)-.25 G
(ly).15 E .129(seamless f)72 304.8 R .129(ashion. This transfer of cont\
rol is initiated by a supplier CGI program as described abo)-.1 F -.15
(ve)-.15 G 2.628(.A).15 G .128(ll the)-2.628 F .319
(information used to start the ksign program, with the e)72 316.8 R .319
(xception of the order number)-.15 F 2.819(,i)-.4 G 2.819(sr)-2.819 G
(elati)-2.819 E -.15(ve)-.25 G .319(ly static, b).15 F(ut)-.2 E .424
(it is ne)72 328.8 R -.15(ve)-.25 G .423(rtheless preferable to read th\
e information from the [transd] section of /etc/ecat.conf to mak).15 F
2.923(es)-.1 G(ure)-2.923 E(that the client ksign program your CGI prog\
ram starts will be \231in sync\232 with your)72 340.8 Q F3(tr)2.5 E
(ansd)-.15 E F2(program.)2.5 E F0 2.5(3.3. Retur)72 364.8 R
(ning the Order T)-.15 E(ext)-.92 E F2 .339
(The contents of the \231unsigned order\232 will probably not be e)72
381 R .34(xactly what is returned to the ksign program as)-.15 F 2.175
(the order te)72 393 R(xt,)-.15 E F3(i.e)4.675 E(.)-.15 E F2 4.675(,t)C
2.175(he \231unsigned order\232 database record will quite lik)-4.675 F
2.175(ely contain additional supplier)-.1 F(-)-.2 E .647
(speci\214c information that is uninteresting or irrele)72 405 R -.25
(va)-.25 G .647(nt to the ECA).25 F 3.147(Tu)-1.11 G .647(ser at MIT)
-3.147 F 3.147(.S)-.74 G .647(ome softw)-3.147 F .647(are for appro-)-.1
F(priately munging the order record into ascii order te)72 417 Q
(xt will thus ha)-.15 E .3 -.15(ve t)-.2 H 2.5(ob).15 G 2.5(ew)-2.5 G
(ritten by the supplier)-2.5 E(.)-.55 E .765(Please read the rele)72
433.2 R -.25(va)-.25 G .765(nt sections of the).25 F F3(ECA)3.265 E
3.265(TA)-.37 G -1.91 -.37(rc h)-3.265 H(itectur).37 E 3.265(ea)-.37 G
.765(nd Implementation)-3.265 F F2 3.264(.F)C .764
(or security reasons, it is)-3.414 F(imperati)72 445.2 Q .341 -.15(ve t)
-.25 H .041(hat you v).15 F .042(erify that the creator of the order an\
d the username parameter match \(modulo the qual-)-.15 F(ifying \231@A)
72 457.2 Q(THEN)-1.11 E(A.MIT)-.35 E
(.EDU\232 which will be appended to the username\).)-.74 E F0 2.5
(3.4. Signing)72 481.2 R(the Order)2.5 E F2 .053
(Signing the order means handing it of)72 497.4 R 2.552(ft)-.25 G 2.552
(oy)-2.552 G .052(our order ful\214llment process, and someho)-2.552 F
2.552(wm)-.25 G .052(arking the order as)-2.552 F
(\231signed\232 \(to pre)72 509.4 Q -.15(ve)-.25 G(nt replay attacks\).)
.15 E 1.185(This could be implemented in an)72 525.6 R 3.685(yn)-.15 G
1.185(umber of w)-3.685 F 1.186(ays. A v)-.1 F 1.186
(ery simple approach, in the spirit of the sample)-.15 F .515(code, w)72
537.6 R .514(ould be to transmit the order by F)-.1 F .514(AX to your e)
-.74 F .514(xisting F)-.15 F .514(AX order number)-.74 F 3.014(,a)-.4 G
.514(nd to remo)-3.014 F .814 -.15(ve t)-.15 H .514(he order).15 F 1.041
(from the \231pending order directory\232. The approach you tak)72 549.6
R 1.041(e, ho)-.1 F(we)-.25 E -.15(ve)-.25 G 1.841 -.4(r, w).15 H 1.042
(ill be dependent on e).4 F 1.042(xisting pro-)-.15 F
(cesses and constraints at your site.)72 561.6 Q(Good luck!)72 577.8 Q
F0(Pr)72 756 Q 132.005(eliminary A)-.18 F(pril 30, 1996)-.25 E
(Con\214dential)133.195 E EP
%%Page: 10 12
%%BeginPageSetup
BP
%%EndPageSetup
EP
%%Page: 1 13
%%BeginPageSetup
BP
%%EndPageSetup
/F0 10/Times-Bold@0 SF(Supplier Ho)72 60 Q(w-T)-.1 E -117.89 141.45
(oi N)-.92 H(etMark)-141.45 E(et)-.1 E/F1 12/Times-Bold@0 SF -1.104(Ta)
242.886 98.4 S(ble of Contents)1.104 E F0 31(1S)72 124.8 S(oftwar)-31 E
2.5(eC)-.18 G(ontents)-2.5 E/F2 10/Times-Roman@0 SF 28.5(..............\
.......................................................................\
.......................... 3)3.53 F 57(1.1 Accounts,)72 139.2 R/F3 10
/Times-Italic@0 SF(etc.)2.5 E F2 28.5(.................................\
.......................................................................\
 3)7.07 F 57(1.2 Con\214guration)72 153.6 R 1.49(Files ................\
.......................................................................\
..........)2.5 F(3)31 E 57(1.3 K)72 168 R(erberos Softw)-.25 E 1.6(are \
.......................................................................\
...........................)-.1 F(3)31 E 57(1.4 ECA)72 182.4 R 2.5(TS)
-1.11 G(oftw)-2.5 E .5(are ............................................\
...........................................................)-.1 F(4)31 E
F0 31(2F)72 196.8 S(irst Steps to F)-31 E(ollo)-.25 E(w)-.1 E F2 28.5(.\
.......................................................................\
................................... 5)4.8 F 57(2.1 Install)72 211.2 R
-.25(Ke)2.5 G(rberos and Con\214guration Files).25 E 28.5
(................................................................ 5)3.15
F 57(2.2 V)72 225.6 R(erify Connecti)-1.11 E(vity with MIT)-.25 E 28.5(\
.......................................................................\
......... 5)3.98 F 57(2.3 Building)72 240 R(Sample)2.5 E F3(tr)2.5 E
(ansd)-.15 E F2 28.5(..................................................\
........................................ 6)3.58 F 49.5(2.3.1 Unix)72
254.4 R(mak)2.5 E 4.94(e.)-.1 G 28.5(..................................\
.......................................................................\
.... 6)-4.94 F 49.5(2.3.2 Threading)72 268.8 R 28.5(...................\
.......................................................................\
...................... 6)2.9 F 57(2.4 Starting)72 283.2 R(Sample)2.5 E
F3(tr)2.5 E(ansd)-.15 E F2 28.5(.......................................\
.................................................... 6)4.42 F 57(2.5 T)
72 297.6 R(esting Sample)-.7 E F3(tr)2.5 E(ansd)-.15 E F2 28.5(........\
.......................................................................\
............. 7)4.29 F 49.5(2.5.1 Quick)72 312 R -.7(Te)2.5 G .54(st ..\
.......................................................................\
......................................).7 F(7)31 E 49.5(2.5.2 Bro)72
326.4 R(wser T)-.25 E 1.35(est ........................................\
...................................................................)-.7
F(7)31 E F0 31(3W)72 340.8 S(riting y)-31 E(our o)-.25 E(wn transd)-.1 E
F2 28.5(...............................................................\
..................................... 9)3.4 F 57(3.1 Order)72 355.2 R
(Handof)2.5 E 2.5(ff)-.25 G(rom CGI to transd)-2.5 E 28.5(.............\
............................................................ 9)3.73 F 57
(3.2 Starting)72 369.6 R(the ksign Program)2.5 E 28.5(.................\
.................................................................... 9)4
F 57(3.3 Returning)72 384 R(the Order T)2.5 E -.15(ex)-.7 G 3.48(t.).15
G 28.5(................................................................\
....................... 9)-3.48 F 57(3.4 Signing)72 398.4 R(the Order)
2.5 E 28.5(............................................................\
....................................... 9)4.84 F F0(Pr)72 756 Q 132.005
(eliminary A)-.18 F(pril 30, 1996)-.25 E(Con\214dential)133.195 E EP
%%Trailer
end
%%EOF