Skip site navigation (1)Skip section navigation (2)
Date:      21 Jan 2002 19:55:37 +0100
From:      Dag-Erling Smorgrav <des@ofug.org>
To:        "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc:        mark@grondar.za, current@FreeBSD.ORG
Subject:   Re: Step6, corresponding /etc/pam.d/* fixes for review
Message-ID:  <xzpr8ojttxy.fsf@flood.ping.uio.no>
In-Reply-To: <20020121184449.GB39745@nagual.pp.ru>
References:  <20020121154244.GC37234@nagual.pp.ru> <xzpbsfnwvfz.fsf@flood.ping.uio.no> <20020121161534.GE37234@nagual.pp.ru> <xzpu1tfvfib.fsf@flood.ping.uio.no> <20020121162726.GH37234@nagual.pp.ru> <xzplmervds6.fsf@flood.ping.uio.no> <20020121172526.GB38390@nagual.pp.ru> <xzp7kqbvbpe.fsf@flood.ping.uio.no> <20020121181318.GA39364@nagual.pp.ru> <xzpvgdvtumv.fsf@flood.ping.uio.no> <20020121184449.GB39745@nagual.pp.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
"Andrey A. Chernov" <ache@nagual.pp.ru> writes:
> On Mon, Jan 21, 2002 at 19:40:40 +0100, Dag-Erling Smorgrav wrote:
> > # grep '^[^#]' /etc/opieaccess
> > permit 127.0.0.1 255.255.255.255
> > permit 10.0.0.1 255.255.255.0
> Really there must be only address resolved from gethostname() call,
> what f.e. "su" sets for PAM_RHOST on localhost.

Sure, but the other hosts on my home LAN (one server, another
workstation, and two to three laptops) are considered "trusted" too :)

> In that case you try to enter with empty Unix password (see my other 
> message)

Agreed.  I didn't see it that way, but you're right.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpr8ojttxy.fsf>