🚀 go-pugleaf

rsalz@rodan.UU.NET (Rich Salz) writes:

>In <3655@aegis.or.jp> davidg@aegis.or.jp (Dave McLane) writes:
>>So far the conclusion I've come to is that the newsreader(s) will
>>have to pass the uid to the nntp server ...
>This is not as easy as you think.  Any client can connect to your
>server.  Making it impossible for them to send the right uid is
>very difficult.
>	telnet news-server 110
>	200 Restricted server, go ahead
>	group mgmt.raises
>	480 permission denied
>	UID 0
>	280 Hello boss
>	group mgmt.raises
>	211 15 989 1006 mgmt.raises
>	...

>As someone else mentioned, INN can do some access control based
>on IP address and/or cleartext name/password; these commands can be
>sent at any time by a reader to vary its access dynamically.

I see the problem. So maybe the only way it would work would be to
have the person telnet themselves to the server where they would
have to have an account. Awkward to be sure, but it would only
have to be for the restricted groups....

Any other ideas anybody?

Dave

--
Dave McLane 
JUNET: davidg@aegis.or.jp (ONLY within Japan: post otherwise)
Nagaokakyoshi, Kyoto Japan Tel: +81-75-951-1168 Fax: +81-75-957-1087