From owner-cvs-all  Thu Jan 24 16:57:43 2002
Delivered-To: cvs-all@freebsd.org
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9CF2537B404; Thu, 24 Jan 2002 16:57:34 -0800 (PST)
Received: (from ache@localhost)
	by nagual.pp.ru (8.11.6/8.11.6) id g0P0vUA89403;
	Fri, 25 Jan 2002 03:57:30 +0300 (MSK)
	(envelope-from ache)
Date: Fri, 25 Jan 2002 03:57:27 +0300
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: Robert Watson <rwatson@FreeBSD.org>
Cc: Dag-Erling Smorgrav <des@FreeBSD.org>,
	cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/lib/libpam/modules/pam_opieaccess pam_opieaccess.c
Message-ID: <20020125005725.GA89369@nagual.pp.ru>
References: <20020124212631.GA86757@nagual.pp.ru> <Pine.NEB.3.96L.1020124192635.67438C-100000@fledge.watson.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Pine.NEB.3.96L.1020124192635.67438C-100000@fledge.watson.org>
User-Agent: Mutt/1.3.27i
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

On Thu, Jan 24, 2002 at 19:29:46 -0500, Robert Watson wrote:
> resolve to my address, and likewise reverse lookup?  Does opieaccess()
> actually convert localhost to 127.0.0.1, or does it rely on the resolver

To prevent any tricks with resolver it is always better to pass numeric IP 
address into PAM's RHOST when possible.

Alternative way is always check back-map for names in set_item(RHOST ...) 
in PAM.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message