PAM_RHOST and reverse hostname lookups

Andreas Schneider asn at samba.org
Wed Jun 29 03:05:22 MDT 2011


Hi Jeremy,

we had some discussions about my s3-auth patchset. We don't want to introduce 
a new dependency in the auth system and get rid of some old ones.

Currently we're doing reverse hostname lookups in s3-auth to set PAM_RHOST. As 
reverse lookups are disabled by default and PAM_RHOST is only really used by 
two modules (pam_rhosts.so and pam_abl.so (auto blacklisting) and else just 
for auditing I would like to suggest to set PAM_RHOST always to the ip 
address.

Do you think we can do this change?


Regards,

	-- andreas

-- 
Andreas Schneider                   GPG-ID: F33E3FC6
Samba Team                             asn at samba.org
www.samba.org



More information about the samba-technical mailing list