


File Formats                                       accesslocal(4)



NAME
     accessremote - remote administration access  rule  for  Sun-
     Screen configuration

DESCRIPTION
     An accessremote object describes who can administer the Sun-
     Screen  remotely  as well as what they can do. It is manipu-
     lated via the configuration editor or SunScreen  administra-
     tion GUI.

     A given user is given permissions via the PERMISSION keyword
     followed  by one of these values:  ALL, WRITE, READ, STATUS,
     NONE.  The default permission level is NONE..

     ALL allows the administrator all the  permission  of  WRITE,
     plus  the  ability  to modify administrative accesslocal and
     accessremote Rules.

     WRITE allows the administrator to read and write  all  data,
     except administrative accesslocal and accessremote Rules.

     READ allows the administrator to  read  all  data,  but  not
     modify any of it.

     STATUS allows the administrator to see status  and  informa-
     tional data, but not policy data.

     An accessremote entry also describes  where  the  administer
     may  connect from with a reference to an Address, a Certifi-
     cate and appropriate algorithms, much like  a  filter  rule.
     The SKIP-related data is specified as follows:

     SKIP_VERSION_1 "name of Certificate" "name of KEY Algorithm"
     "name of Data Algorithm"

     SKIP_VERSION_2 "name of Certificate" "name of KEY Algorithm"
     "name  of  Data  Algorithm" "name of MAC Algorithm" "name of
     Compression Algorithm"

     In both cases, an optional TUNNEL "name of Address"  may  be
     specified  if the remote administration station will be per-
     forming tunnelling.

     All accessremote may have an optional COMMENT field  associ-
     ated  with  them  which  is  a  256-character  or less user-
     provided comment.

     All  accessremote  may  be  optionally  associated  with   a
     specific  SCREEN  object.   If an accessremote is so associ-
     ated, it will only allows  the  indicated  administrator  to
     administer the specified SCREEN with which it is associated.




                  Last change: 31 January 2000                  1






File Formats                                       accesslocal(4)



     An accessremote entry is uniquely identified by its position
     in  the list of accessremote entries.  This numeric position
     is its identity regradless of any association with a  SCREEN
     object.   This  identity  may  change  as other accessremote
     entries are added to the list.

SEE ALSO
     ssadm-edit(1M),  accesslocal(4),  address(4),   authuser(4),
     certificate(4), rule(4), screen(4)














































                  Last change: 31 January 2000                  2



