Date: Mon, 6 Aug 2001 00:28:49 +0400 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Mark Murray <mark@grondar.za> Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libopie Makefile Message-ID: <20010806002848.B47300@nagual.pp.ru> In-Reply-To: <200108051444.f75EiVZ04340@grimreaper.grondar.za> References: <20010805024631.B36079@nagual.pp.ru> <200108051444.f75EiVZ04340@grimreaper.grondar.za>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Aug 05, 2001 at 15:44:31 +0100, Mark Murray wrote: > I'm having a problem parsing this. Sorry, it is my bad English. Typical /etc/opieaccess is: permit 127.0.0.1 255.255.255.255 permit xx.xx.xx.xx 255.255.255.255 (second is externally visible machine address) It allows both local ftp command and remote FTP (21) via SSH which use external address address, but calls ftpd on local machine. I mean not current system FTPD, but FTPD with proper OPIE integration like wu-ftpd. > > opiepasswd: user can't change its own password when count dropped to 0. > > Sounds like you either need to manage passwords better or that you need > WANT_INSECURE_OPIE. What you mean by 'better'? Each OPIE password have its count down with max 9999 value. > I understand the X Terminal problem, and I'm hoping to fix it. For the > rest, I have to repeat that it loooks like you need to build your world > with WANT_INSECURE_OPIE set to "true". Nowdays all machines used as servers with rare console access, it means that most connections are remote connections, and it means that _by_default_ OPIE must assume this variant. And for admins which don't trust any remote connection we can have just opposite option. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010806002848.B47300>