Re: NFS export to netgroup with duplicate hosts

2001-04-13 Thread Matt Dillon
:on BSD, and we can do more finetuning than on Solaris itself. Also :mountd and export seems to support more features than in Solaris, :according to the manpage. : :Could this export restriction change in future with nfsv4, when nfs :does get stateful (I've heard about that the stateless behaviour

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Martin Blapp
Hi Alfred, s: nice story, thank you master ;-) Martin PS: Thank you for the tirpc work you have done and the hours you have spent. I've not forgotten this. I was just angry about the incidents on irc ... ;-) To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Martin Blapp
> The reason is that the file handles passed to nfsd could then > be trivially faked to gain rw access on a ro-exported subdirectory. > For example, if you export /usr read-only and /usr/local read-write, > you can then construct an NFS request using /usr/local's mount point >

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Matt Dillon
:Hi, : :Of course you are right. Netgroup support got in some area broken :when I did the IPv6 merge of NetBSD code. It will be fixed :soon, sorry ! : :Another issue with mountd is, that it allows still one set of flags :for one mountpoint. This is done per radix entry in the kernel and tied :to

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Alfred Perlstein
* Thomas Quinot <[EMAIL PROTECTED]> [010412 11:06] wrote: > Le 2001-04-12, Alfred Perlstein écrivait : > > > m: "Don't call me dude." *thwack* "The point is that if the > > workstation is untrusted, what's the stop the mallicious hacker > > from taking a read-only filehandle and swapping the top

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Thomas Quinot
Le 2001-04-12, Alfred Perlstein écrivait : > m: "Don't call me dude." *thwack* "The point is that if the > workstation is untrusted, what's the stop the mallicious hacker > from taking a read-only filehandle and swapping the top byte with > the byte required for write access?" The kernel could i

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Alfred Perlstein
* Martin Blapp <[EMAIL PROTECTED]> [010412 10:11] wrote: > > > If we manage it, mountd should soon be able to allow different mount flags > > for each path you export in /etc/exports. > > I'm sorry. But now after some investigations and talks with Robert > Watson it seems to be clear that this i

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Martin Blapp
> If we manage it, mountd should soon be able to allow different mount flags > for each path you export in /etc/exports. I'm sorry. But now after some investigations and talks with Robert Watson it seems to be clear that this is not possible due the way nfs works. It would be easy to fix mountd

Re: NFS export to netgroup with duplicate hosts

2001-04-12 Thread Martin Blapp
Hi, Of course you are right. Netgroup support got in some area broken when I did the IPv6 merge of NetBSD code. It will be fixed soon, sorry ! Another issue with mountd is, that it allows still one set of flags for one mountpoint. This is done per radix entry in the kernel and tied to each file

NFS export to netgroup with duplicate hosts

2001-04-12 Thread Thomas Quinot
Hi -CURRENT users, I wonder what should happen when a volume is exported through NFS to a netgroup that contains duplicate hosts. At this site, we have a number of netgroups which contain both qualified and unqualified host names, as in MyNetgroup(somehost,-,-) (somehost.dom.ain,-,-) ... a