Menu

#3 ACL matching is broken

0.46
open
nobody
5
2002-11-28
2002-06-12
No

ACL matching code is broken, *lines will match on IPs
that don't fall into the subnet.

dlines would be the biggest problem, it's even possible
to get locked out of your own server because of a dline
somewhat close to your IP, but nowhere near actually
matching.

Discussion

  • Walter Francis

    Walter Francis - 2002-11-28
    • milestone: 209763 --> 0.46
     
  • Walter Francis

    Walter Francis - 2003-09-13

    Logged In: YES
    user_id=560940

    For a temporary measure, I have commented out the checking of acl's at login time. If anyone actually USES acl's they might notice this and consider it a problem, but considering that ACL's match sometimes *completely* wrong, I feel it's better than it has been.

    This change is in 0.47. This bug will remain open until fixed properly, however.

     

Log in to post a comment.

MongoDB Logo MongoDB