PAM_RHOST and reverse hostname lookups
Andreas Schneider
asn at samba.org
Wed Jun 29 03:05:22 MDT 2011
Hi Jeremy,
we had some discussions about my s3-auth patchset. We don't want to introduce
a new dependency in the auth system and get rid of some old ones.
Currently we're doing reverse hostname lookups in s3-auth to set PAM_RHOST. As
reverse lookups are disabled by default and PAM_RHOST is only really used by
two modules (pam_rhosts.so and pam_abl.so (auto blacklisting) and else just
for auditing I would like to suggest to set PAM_RHOST always to the ip
address.
Do you think we can do this change?
Regards,
-- andreas
--
Andreas Schneider GPG-ID: F33E3FC6
Samba Team asn at samba.org
www.samba.org
More information about the samba-technical
mailing list