GSI security for the socket server
==================================

1. /etc/gsi contains:
---------------------
	root encrypted-passw [dirs]
	user encrypted-passw [dirs]
	none

Best is to let /etc/gsi only be readable by  root, and make gsi_server
suid root.  'none' has  only read access  and cannot load  files (only
loading from program  memory works). root  really  shouldn't be in the
list.

none -> anonymous?

is 'dirs' useful?

2. ~/.gsi-passwd :
------------------
Contains  the pass word to  access gsi (unencrypted, will be encrypted
before being sent  to gsi_server), can be  overridden by  an env. var.
If not readable, try user anonymous?
This file should ONLY be readable by the owner.


3. Environment variables
------------------------
	GSI_PASSWD_FILE
overrides ~/.gsi-passwd if set (and if the file is readable).
This file should ONLY be readable by the owner.


WHS (wouters@cistron.nl)
