Login Failure

Gerald Carter gcarter at valinux.com
Mon Mar 26 04:12:03 GMT 2001


On Sun, 25 Mar 2001 19:21:21 Tim Potter wrote:
>
> OK - when host machines connect to Samba and the 'hosts allow'
> and 'hosts deny' options are present, Samba needs to determine
> the DNS name to work out whether to allow the connection.  If the
> host does not have a reverse IP then it is automatically rejected
> as Samba cannot determine whether to allow or deny the
> connection.  This is because the code is based on the tcp wrapper
> code and netbios names are too easy to spoof.
> 
> Er, I don't think it is actually documented anywhere.  )-:

Tim,

I'm going to look at this tomorrow again.  If the hosts allow/deny
only has IP addrs in it, then the gethostbyaddr() calls are 
unnecessary.  Sounds ok?






CHeers, jerry
----------------------------------------------------------------------
   /\  Gerald (Jerry) Carter                     Professional Services
 \/    http://www.valinux.com/  VA Linux Systems   gcarter at valinux.com
       http://www.samba.org/       SAMBA Team          jerry at samba.org
       http://www.plainjoe.org/                     jerry at plainjoe.org

       "...a hundred billion castaways looking for a home."
                                - Sting "Message in a Bottle" ( 1979 )





More information about the samba mailing list