acl_db(5)

     NAME
          acl_db - database of Access Control Lists

     DESCRIPTION
          The acl_db file is used by various Xinet programs to grant
          (or deny) access to various subsystems.  It consists of a
          series of named ``Access Control Lists'' that specify
          AppleTalk and/or IP addresses and User Accounts that are
          allowed to use a service.  As of this writing, ACLs are used
          to control access to AppleShare Volumes and the
          configuration GUI.

          The file consists of a sequence of text lines, one list per
          line, where each line looks like:
               ACL_name:flags:list_item_1[,list_item_N]
          where ACL_name is the reference name, flags is used by the
          GUI to control which ACLs are effective for a service, and
          the comma-separated list_items make up the access list.
          Spaces are allowed, but are significant (i.e.  always part
          of any name).  The list item sequence can consist of:

          Astart:end
               If access is via AppleTalk, allow any host in the
               network range start to end.

          Hipaddr
               Allow a host with IP address ipaddr, which can be a
               name or in standard Internet dot notation.

          Nipaddr:mask
               Allow hosts on IP Network ipaddr (which must be in dot
               notation), with mask number of upper bits denoting the
               network portion of the address.

          Uname
               Allow login account name access.  If an ACL contains no
               account items, all users from access-granted host
               addresses are allowed access.

          Lacl Search ACL list acl along with this access list.  If
               one ACL has users listed, they do NOT combine with or
               affect other referenced ACLs.  Once access is granted,
               sub-ACLs are ignored.

          There are two pre-defined ACLs that are always available
          whether or not any ACLs are provided in the database (and if
          they ARE included in the database, they will be ignored).
          They are:  <Local Networks> and <No Access> (where the
          brackets are part of the name).  Services protected by the
          <Local Networks> ACL will be useable by any AppleTalk or IP
          networks directly-connected to the server.  If the <No
          Access> ACL is used, the service is effectively disabled.

          If a service is protected by an ACL, and that ACL name does
          not match an entry in this database, that access control
          defaults to the <Local Networks> ACL.

     FILES
          /var/adm/appletalk/acl_db