From owner-cvs-etc  Mon Oct 27 10:53:35 1997
Return-Path: <owner-cvs-etc>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id KAA14458
          for cvs-etc-outgoing; Mon, 27 Oct 1997 10:53:35 -0800 (PST)
          (envelope-from owner-cvs-etc)
Received: from precipice.shockwave.com (precipice.shockwave.com [207.105.15.229])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id KAA14453;
          Mon, 27 Oct 1997 10:53:32 -0800 (PST)
          (envelope-from pst@shockwave.com)
Received: from shockwave.com (localhost [127.0.0.1]) by precipice.shockwave.com (8.8.7/8.7.3) with ESMTP id KAA07132; Mon, 27 Oct 1997 10:52:53 -0800 (PST)
Message-Id: <199710271852.KAA07132@precipice.shockwave.com>
To: Nate Williams <nate@mt.sri.com>
cc: =?KOI8-R?B?4c7E0sXKIP7F0s7P1w==?= <ache@nagual.pp.ru>,
        cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-etc@FreeBSD.ORG
Subject: Re: cvs commit: src/etc master.passwd 
In-reply-to: Your message of "Mon, 27 Oct 1997 11:28:29 MST."
             <199710271828.LAA01057@rocky.mt.sri.com> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Mon, 27 Oct 1997 10:52:51 -0800
From: Paul Traina <pst@shockwave.com>
Sender: owner-cvs-etc@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > Forget about Apache, it simple reveals the bug. Lets talk about tftpd and
> > fingerd conflict. Your suggestion will be make yet another nobody still?
> > 
> > > No, nobody means 'nobody'.  Apache is a 'daemon', so if that's not
> > > appropriate, create a new user for it.  Either that or disable fingerd
> > > on machines where Apache is running.
> > 
> > tftpd is daemon too. Lets disable tftpd on fingerd machines.
> 
> tftpd should be disabled on *every* machine. :)
> 
> > Or vice versa. Or make yet another 100 nousers to satisfy each daemon
> > which need it.
> 
> It seems that your problem is with fingerd taking up too many resources,
> not on users.  Fix the problem, don't band-aid around it and cause other
> problems.

For once I agree with Andrey... the problem here is not fingerd's resource
utilization, it's that we have daemons starting in inetd not running with
daemon resource limits.  That should be fixed, one way or another.