RE: [Tipc-discussion] RE: TIPCv2 test spec!

[Yin, H. <hu...@in...>]

Jon,

=20

Thanks for your reply. I'm here waiting for your latest TIPC version,
hehe : - )

=20

Have a nice day!

=20

Nick

-----Original Message-----
From: Jon Maloy [mailto:jon...@er...]=20
Sent: Saturday, June 05, 2004 2:38 AM
To: Mark Haverkamp
Cc: Yin, Hu; tipc
Subject: Re: [Tipc-discussion] RE: TIPCv2 test spec!

=20

No, you must have a "management connection" to the node
to be able to do this kind of changes. The idea is that a user land
process on one of the nodes ("zone master") takes command from=20
the beginning and establishes one such connection to all the other=20
nodes, and then holds on this connection as long as it is running.

Each TIPC module only allows one such connection, and will
reject all other setup requests, so as long as we make sure that
the zone master is started on a trusted processor and holds on to
its connection we should be safe.

As an extra precaution I have in the version I am working on now
made this whole remote configurability configurable, so that if shut=20
off TIPC only accepts commands from the local node. This is one of=20
the commands, (along with change of node address and a few more)=20
that go via ioctl() instead of via the management port.=20

What I am working on now is such a client CLM process, but I have had to
concentrate on the basic stuff, such as setting node address and
enabling/
disabling bearers on the local node, so there is no zone master yet.
This=20
will have to wait until later; I will check in what I have as soon as I
have=20
merged with the latest changes and tested with running traffic.

/Jon

Mark Haverkamp wrote:



On Thu, 2004-06-03 at 05:59, Jon Maloy wrote:
 =20

	Good.
	When/if you find the problem just send me the patch(es).
	In a couple of days I will check in  a version where we
	rely entirely on the management interface (=3Dno more
	insmod parameters), so this must work.
	=20
	/Jon
	=20
	   =20

=20
I don't see any protection against anyone doing link configuration
commands via the management interface.  Could just anyone reconfigure
links, disable bearers, etc.?
=20
=20
 =20

=20