[Fedora-directory-users] Switching off host filter in admin server - how?
Richard Megginson
rmeggins at redhat.com
Sat Mar 4 23:31:19 UTC 2006
Graham Leggett wrote:
> Richard Megginson wrote:
>
>>> Having got my brand new DS v1.0.2 up and running, and the admin
>>> server started up, I discover that the admin server has arbitrarily
>>> placed a host check of *.domain.com onto the server, effectively
>>> locking me out of the admin server (my client machine is not in
>>> *.domain.com).
>>
>
>> See http://directory.fedora.redhat.com/wiki/Howto:AdminServerLDAPMgmt
>> and
>> https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183925
>
>
> I don't follow - I need to download the source, apply the patch in the
> above bug, then rebuild the entire thing before I have any hope of
> administering this server?
no, you just need to supply a pattern which _does not match_ the
incoming IP address. Then it will allow it. It's backwards.
>
> Is there some kind of manual override that I can use to switch this
> behaviour off? Or alternatively if this is not possible, to require
> localhost so that I can run the admin server behind a reverse proxy
> whose access control does work properly?
>
> Having changed the *.domain.com to * I am now getting this error:
>
> [Sat Mar 04 10:42:50 2006] [notice] [client xx.xx.xx.xx]
> admserv_host_ip_check: Unauthorized host ip=xx.xx.xx.xx, connection
> rejected
>
> Google finds other people with this problem, apparently "*" doesn't
> mean "let everybody in", but instead it means "let everyone in whose
> reverse DNS works". In this case reverse DNS does work, but I may be
> getting bitten by bug 183925.
>
> So in short, does the admin server in v1.0.2 work at all, or am I just
> wasting my time? :(
>
> Regards,
> Graham
> --
>
>------------------------------------------------------------------------
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060304/b9f5a847/attachment.bin>
More information about the Fedora-directory-users
mailing list