ACL Format

Each ACL file is a list of entries, one per line, of the following form:

<Client ID> <public key> [P] [<ABone account>]

• $<$Client ID$>$ is a string, used by Anetd as an index to the corresponding public key. One client can have as many client IDs as he wants, each associated with a public key⁰. However, on the ABone each principal must use his or her e-mail address as client ID for the public key registered with the ABOCC.

• $<$public key$>$ is the client's 512-bit public key in printable ASCII. Any incoming request from the client Client ID will be verified using this key. In case a command fails the verification, Anetd returns the error CLIENT_NOT_AUTHORIZED.

• P indicates that the client is authorized to issue permanent commands (see section 3.8.1).

• $<$ABone account$>$ In case this field is not present, any request coming from the client $<$Client ID$>$ that is successfully verified will execute in the Anetd that received the request. If this field is present, the primary Anetd daemon will attempt to forward the incoming request to a daemon acting in the ABone role $<$ABone account$>$. See also section 3.3.2.