Path: utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!usc!cs.utexas.edu!mailrus!ncar!boulder!grunwald From: grunwald@foobar.colorado.edu (Dirk Grunwald) Newsgroups: comp.unix.ultrix Subject: Re: Domain names & /etc/exports Message-ID: <13351@boulder.Colorado.EDU> Date: 31 Oct 89 00:28:25 GMT References: <1050@crltrx.crl.dec.com> <13019@boulder.Colorado.EDU> <16145@netnews.upenn.edu> Sender: news@boulder.Colorado.EDU Reply-To: grunwald@foobar.colorado.edu Distribution: comp Organization: University of Colorado at Boulder Lines: 37 In-reply-to: litwack@dccs.upenn.edu's message of 30 Oct 89 22:50:26 GMT In article <16145@netnews.upenn.edu> litwack@dccs.upenn.edu (Mark Litwack) writes: > It's a mountd misfeature. What happens is this: > > - mounted receives a request from a.b.c.d (address) > - it looks up the address to get the name > - it matches the string it gets back against the names > in the exports file Not quite. The name that is matched is the name that the requesting machine sends the server. It's strange to do the security check this way because a requesting machine could lie about its name. You have to start /etc/mountd with the -i option to make it verify the IP address as described above (which is not the DEC default). -mark --- not only is it not supported, but on an DECstation 3100 with Ultrix 3.1, we get... # /etc/mountd -i # ps -augx | grep mountd root 28387 0.0 0.3 40 32 p0 S 0:00 grep mountd # /etc/mountd # !ps ps -augx | grep mountd root 28389 0.0 1.3 192 156 p0 S 0:00 /etc/mountd root 28391 0.0 0.3 40 32 p0 S 0:00 grep mountd # i.e. /etc/mountd doesn't appear to work. and yes, I'd file an SPR, but I *still* don't know how to do this electroniclly (or at all, actually).