Date: Fri, 25 Jan 2002 03:57:27 +0300 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Robert Watson <rwatson@FreeBSD.org> Cc: Dag-Erling Smorgrav <des@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libpam/modules/pam_opieaccess pam_opieaccess.c Message-ID: <20020125005725.GA89369@nagual.pp.ru> In-Reply-To: <Pine.NEB.3.96L.1020124192635.67438C-100000@fledge.watson.org> References: <20020124212631.GA86757@nagual.pp.ru> <Pine.NEB.3.96L.1020124192635.67438C-100000@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jan 24, 2002 at 19:29:46 -0500, Robert Watson wrote: > resolve to my address, and likewise reverse lookup? Does opieaccess() > actually convert localhost to 127.0.0.1, or does it rely on the resolver To prevent any tricks with resolver it is always better to pass numeric IP address into PAM's RHOST when possible. Alternative way is always check back-map for names in set_item(RHOST ...) in PAM. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020125005725.GA89369>