
# This is the new netperm-table file for snksu v2.0.  The "authserver"
# line is the same as version 1 and should not be changed.  The additional
# "su:" lines control access, as described below.


su: authserver authsrv.cit.Princeton.EDU 7051


# When checking access permissions, snksu v2.0 works as follows:
# The tire group is checked first.  If a user id is in the tire group,
# then that id is allowed to snksu to anybody.  (After all, if you're in
# tire you can su to root.)  If the user is not in the tire group, snksu
# then checks the netperm file.  Authorisation entries in the netperm
# file have the following syntax:
#
# su: su+<newid> <uid1> <uid2> ......
#
# This means that anyone in the list of uid's (<uid1>, <uid2>, etc.) can
# use snk to switch to <newid>.
#
# Here's an example:
#
# su: su+oracle fred bob dave
#
# this means fred, bob and dave are allowed to snksu to oracle.

