Use reserved port only when required for NIS look-ups
Jeff Law
law@redhat.com
Mon Aug 13 16:29:00 GMT 2012
On 08/13/2012 06:27 AM, Honza Horak wrote:
> On 08/13/2012 01:57 PM, Tomas Mraz wrote:
> > Also I think that the real reason why the privileged port is used
> > for all lookups in the current glibc is that the information which
> > database is secured and which not is not available from the server
> > and making it necessity to configure this information explicitly on
> > all clients was considered as user unfriendly. Would it be possible
> > to make the code do some heuristics and fallbacks? For example for
> > the shadow and gshadow db default with privileged port and for the
> > rest default as non-privileged and if the server returns failure try
> > to use the privileged port?
>
> I think that would be possible if we accepted slightly worse performance
> because of the second request, but generally I like that idea.
Seems reasonable to me as well. I'd be slightly worried about the
performance aspects too.
Presumably we could note when the first lookup using a non-privileged
port failed and for that map & server, use the fallback of a privileged
port for all future lookups.
Jeff
More information about the Libc-alpha
mailing list