[Fedora-directory-users] Switching off host filter in admin server - how?

Kimmo Koivisto is95kiko at surfeu.fi
Sat Mar 4 17:37:58 UTC 2006


Graham Leggett kirjoitti viestissään (lähetysaika Saturday 04 March 2006 
18:44):
> Is there some kind of manual override that I can use to switch this
> behaviour off? Or alternatively if this is not possible, to require
> localhost so that I can run the admin server behind a reverse proxy
> whose access control does work properly?
Because of the bug, you have to set nsAdminAccessAddresses to something you 
don't have and empty nsAdminAccessHosts. Well, there might be other ways to 
do it, this worked for me.

I needed to allow administration from anywhere so made the following 
definitions:
nsAdminAccessAddresses=255.255.255.255
nsAdminAccessHosts=

and restarted the admin server.

Regards
Kimmo Koivisto
>
> Having changed the *.domain.com to * I am now getting this error:
>
> [Sat Mar 04 10:42:50 2006] [notice] [client xx.xx.xx.xx]
> admserv_host_ip_check: Unauthorized host ip=xx.xx.xx.xx, connection
> rejected
>
> Google finds other people with this problem, apparently "*" doesn't mean
> "let everybody in", but instead it means "let everyone in whose reverse
> DNS works". In this case reverse DNS does work, but I may be getting
> bitten by bug 183925.
>
> So in short, does the admin server in v1.0.2 work at all, or am I just
> wasting my time? :(
>
> Regards,
> Graham
> --




More information about the Fedora-directory-users mailing list