On Wed, Nov 20, 2002 at 09:05:16PM -0000, Darrell May <[EMAIL PROTECTED]> wrote:
> 
> Charlie Brady <[EMAIL PROTECTED]> said:
> 
> > You might want to check what "joe" here means. It's documented at:
> >
> > http://cr.yp.to/proto/ucspi-tcp.txt
> 
> 'TCPREMOTEINFO, if possible: the result of a 931/1413/IDENT/TAP query'
> 
> IIUC this returns system not user info.

More importantly, it returns unreliable info, unless you control
the system that the connection originates from.

If it's originating from another SME Server you trust, then you know
it'll be related to the workstation that the connection came from;
if it's coming from a conventional Unix box you trust, then you know
it'll be the user's username. If it's coming from a box you don't
have control over ident on, you can never rely on what's there.

For more on how to use ident, see

   http://www.lafferty.ca/stuff/irc/old-text/why-ident.txt

I think you've heard of the author :-)

  -Rich

-- 
------------------------------ Rich Lafferty ---------------------------
 Systems Administrator/Support Engineer, Network Server Solutions Group
    Mitel Networks, Ottawa, ON                 +1 613 592 2122 (x2513)
-------------------------- [EMAIL PROTECTED]  --------------------

--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Searchable archive at http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to