Mailinglist Archive: opensuse-bugs (4247 mails)

< Previous Next >
[Bug 1019866] pam_access.so is not supporting a keywords like LOCAL (man access.conf)
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Fri, 27 Jan 2017 07:41:44 +0000
  • Message-id: <bug-1019866-21960-Bz4DtOXqFH@http.bugzilla.opensuse.org/>
http://bugzilla.opensuse.org/show_bug.cgi?id=1019866
http://bugzilla.opensuse.org/show_bug.cgi?id=1019866#c6

--- Comment #6 from Josef Möllers <josef.moellers@xxxxxxxx> ---
"LOCAL" works as designed. The manual page is not very easy to understand as it
refers to internals of the pam_access module, but what it boils down to is that
if you have a network connection (and a connection through the loopback device
counts as such), this is not "LOCAL":
"LOCAL keyword matches if and only if the PAM_RHOST is not set and <origin>
field is thus set from PAM_TTY or PAM_SERVICE".

As to "localhost" (or any other hostname) not being resolved: this is, indeed,
not handled, I'm working on that.

--
You are receiving this mail because:
You are on the CC list for the bug.
< Previous Next >