Bug 494585
Summary: | libwrap - Nor ip, nor hostname work,, only when used ALL expression in hosts.deny access is denied | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 4 | Reporter: | Jan Ščotka <jscotka> |
Component: | nfs-utils | Assignee: | Steve Dickson <steved> |
Status: | CLOSED ERRATA | QA Contact: | BaseOS QE <qe-baseos-auto> |
Severity: | urgent | Docs Contact: | |
Priority: | low | ||
Version: | 4.8 | CC: | dkovalsk, rwheeler, thoger |
Target Milestone: | rc | Keywords: | Regression |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-05-18 19:02:23 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 458676 |
Description
Jan Ščotka
2009-04-07 14:54:17 UTC
(In reply to comment #0) > when used (where ip is ip adress of client (where runned mount command) > mountd: 10.16.40.140 > statd: 10.16.40.140 This should be a consequence of incorrect use of tcp_wrapper by nfs-utils. See bug #458676 for details, there should be similar case mentioned in comment 11. > But when I used same command on computer where nfs running, mount is succesful > (but shouldn't be) As noted in https://bugzilla.redhat.com/show_bug.cgi?id=493631#c10 , all local access is permitted by nfs-utils regardless of tcp_wrappers configuration. This seems to be a design decision, that we may not want to change. It can be, but dont know. Now I tested various configuration. When I used mountd:ALL statd:ALL in hosts.deny connection was refused when I add mountd:10.16.40.140 statd:10.16.40.140 into hosts.access As expected I can connect nfs export. This look like, the problem is only when hosts.deny is used (In reply to comment #3) > when I add > mountd:10.16.40.140 > statd:10.16.40.140 > into hosts.access > As expected I can connect nfs export. > > This look like, the problem is only when hosts.deny is used See https://bugzilla.redhat.com/show_bug.cgi?id=458676#c11 for the explanation. Strange behaviour :-) With Respect to Comment #3, using the -93 nfs-utils package, both hostnames and IPaddress now do indeed work in the hosts.deny files. At least thats what my testing showed.. An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2009-0955.html |