Your message dated Wed, 21 Sep 2005 23:10:57 +0100
with message-id <[EMAIL PROTECTED]>
and subject line Bug#329371: nis: ypbind/ypserv and broadcast option
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 21 Sep 2005 12:54:29 +0000
>From [EMAIL PROTECTED] Wed Sep 21 05:54:29 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mta.sara.nl [145.100.16.144]
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EI47I-0004ln-00; Wed, 21 Sep 2005 05:54:29 -0700
Received: from install.irc.sara.nl (ns.rc.sara.nl [145.100.29.211])
by mta.sara.nl (8.12.10+Sun/8.12.10) with ESMTP id j8LCrs2B006615
for <[EMAIL PROTECTED]>; Wed, 21 Sep 2005 14:53:57 +0200 (MEST)
Received: from fs.irc.sara.nl (fs.irc.sara.nl [192.168.16.2])
by install.irc.sara.nl (Postfix) with ESMTP id B95ACA000BD
for <[EMAIL PROTECTED]>; Wed, 21 Sep 2005 14:53:54 +0200 (CEST)
Received: by fs.irc.sara.nl (Postfix, from userid 0)
id AD544C00186; Wed, 21 Sep 2005 14:53:54 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: root <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: nis: ypbind/ypserv and broadcast option
X-Mailer: reportbug 3.8
Date: Wed, 21 Sep 2005 14:53:54 +0200
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Package: nis
Version: 3.13-2
Severity: important
On our cluster we have nodes with dual interfaces, ib0 (infiniband) and
eth0 (gigabit).
On our NIS servers we only allow binding to eth0 interface, ypserv.conf:
# Always allow access for localhost
255.0.0.0 127.0.0.0
255.255.252.0 192.168.16.0 (eth0)
## 255.255.252.0 10.0.16.0 (ib0)
For our NIS-clients we use: (yp.conf)
domain elsacafe broadcast
When we start nis on a client it binds to ib-r7n15 (10.0.17.130) which is
not allowed (ypwhich). We can not login or do other things on this node
because it is not allowed to query the nis server. Due the broadcast
option is also binds once in an while on the right interface.
I think ypserv sends back the wrong response when it receives a binding
option
Regards
-- Package-specific info:
NIS domain: elsacafe
-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.11.11-sarahypt2
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages nis depends on:
ii debconf 1.4.30.13 Debian configuration management sy
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libgdbm3 1.8.3-2 GNU dbm database routines (runtime
ii libslp1 1.0.11a-2 OpenSLP libraries
ii make 3.80-9 The GNU version of the "make" util
ii netbase 4.21 Basic TCP/IP networking system
ii portmap 5-9 The RPC portmapper
ii sysvinit 2.86.ds1-1 System-V like init
-- debconf information:
* nis/not-yet-configured:
* nis/domain: testcafe
---------------------------------------
Received: (at 329371-done) by bugs.debian.org; 21 Sep 2005 22:11:02 +0000
>From [EMAIL PROTECTED] Wed Sep 21 15:11:02 2005
Return-path: <[EMAIL PROTECTED]>
Received: from kerouac.projectcolo.org.uk [80.71.3.114]
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EICnt-0001Pw-00; Wed, 21 Sep 2005 15:11:01 -0700
Received: from localhost (localhost [127.0.0.1])
by kerouac.projectcolo.org.uk (Postfix) with ESMTP id 8ECEE7A019
for <[EMAIL PROTECTED]>; Wed, 21 Sep 2005 23:11:00 +0100 (BST)
Received: from kerouac.projectcolo.org.uk ([127.0.0.1])
by localhost (kerouac [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 20664-01 for <[EMAIL PROTECTED]>;
Wed, 21 Sep 2005 23:11:00 +0100 (BST)
Received: from lorien.sirena.org.uk
(82-41-255-123.cable.ubr04.edin.blueyonder.co.uk [82.41.255.123])
(using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
(No client certificate requested)
by kerouac.projectcolo.org.uk (Postfix) with ESMTP id 18D4F7A015
for <[EMAIL PROTECTED]>; Wed, 21 Sep 2005 23:11:00 +0100 (BST)
Received: from raphaela (unknown [192.168.56.246])
by lorien.sirena.org.uk (Postfix) with ESMTP id E52FA2AD18
for <[EMAIL PROTECTED]>; Wed, 21 Sep 2005 23:10:57 +0100 (BST)
Received: by raphaela (Postfix, from userid 1000)
id 18334FAD4A; Wed, 21 Sep 2005 23:10:57 +0100 (BST)
Date: Wed, 21 Sep 2005 23:10:57 +0100
From: Mark Brown <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Bug#329371: nis: ypbind/ypserv and broadcast option
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
X-Cookie: I demand IMPUNITY!
User-Agent: Mutt/1.5.10i
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at projectcolo.org.uk
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
On Wed, Sep 21, 2005 at 02:53:54PM +0200, root wrote:
> On our NIS servers we only allow binding to eth0 interface, ypserv.conf:
> # Always allow access for localhost
> 255.0.0.0 127.0.0.0
> 255.255.252.0 192.168.16.0 (eth0)
That's not the documented format for ypserv.conf. It should say
something more like (untested, so it may need some modification):
127.0.0.0/8:*:*:none
192.168.16.0/255.255.252.0:*:*:none
*:*:*:deny
for what you seem to be looking for. Please see the manual page for
ypserv.conf or look at the commented entries in the default ypserv.conf
for examples.
--
"You grabbed my hand and we fell into it, like a daydream - or a fever."
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
