From owner-freebsd-current  Mon Jan 21 10:55:47 2002
Delivered-To: freebsd-current@freebsd.org
Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31])
	by hub.freebsd.org (Postfix) with ESMTP id 2087A37B400
	for <current@FreeBSD.ORG>; Mon, 21 Jan 2002 10:55:39 -0800 (PST)
Received: by flood.ping.uio.no (Postfix, from userid 2602)
	id E940F532C; Mon, 21 Jan 2002 19:55:37 +0100 (CET)
X-URL: http://www.ofug.org/~des/
X-Disclaimer: The views expressed in this message do not necessarily
  coincide with those of any organisation or company with
  which I am or have been affiliated.
To: "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc: mark@grondar.za, current@FreeBSD.ORG
Subject: Re: Step6, corresponding /etc/pam.d/* fixes for review
References: <20020121154244.GC37234@nagual.pp.ru>
	<xzpbsfnwvfz.fsf@flood.ping.uio.no>
	<20020121161534.GE37234@nagual.pp.ru>
	<xzpu1tfvfib.fsf@flood.ping.uio.no>
	<20020121162726.GH37234@nagual.pp.ru>
	<xzplmervds6.fsf@flood.ping.uio.no>
	<20020121172526.GB38390@nagual.pp.ru>
	<xzp7kqbvbpe.fsf@flood.ping.uio.no>
	<20020121181318.GA39364@nagual.pp.ru>
	<xzpvgdvtumv.fsf@flood.ping.uio.no>
	<20020121184449.GB39745@nagual.pp.ru>
From: Dag-Erling Smorgrav <des@ofug.org>
Date: 21 Jan 2002 19:55:37 +0100
In-Reply-To: <20020121184449.GB39745@nagual.pp.ru>
Message-ID: <xzpr8ojttxy.fsf@flood.ping.uio.no>
Lines: 19
User-Agent: Gnus/5.0808 (Gnus v5.8.8) Emacs/21.1
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

"Andrey A. Chernov" <ache@nagual.pp.ru> writes:
> On Mon, Jan 21, 2002 at 19:40:40 +0100, Dag-Erling Smorgrav wrote:
> > # grep '^[^#]' /etc/opieaccess
> > permit 127.0.0.1 255.255.255.255
> > permit 10.0.0.1 255.255.255.0
> Really there must be only address resolved from gethostname() call,
> what f.e. "su" sets for PAM_RHOST on localhost.

Sure, but the other hosts on my home LAN (one server, another
workstation, and two to three laptops) are considered "trusted" too :)

> In that case you try to enter with empty Unix password (see my other 
> message)

Agreed.  I didn't see it that way, but you're right.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message