🚀 go-pugleaf

In article <3661@aegis.or.jp> davidg@aegis.or.jp (Dave McLane) writes:
>rsalz@rodan.UU.NET (Rich Salz) writes:
>
>>As someone else mentioned, INN can do some access control based
>>on IP address and/or cleartext name/password; these commands can be
>>sent at any time by a reader to vary its access dynamically.
>
>I see the problem. So maybe the only way it would work would be to
>have the person telnet themselves to the server where they would
>have to have an account. Awkward to be sure, but it would only
>have to be for the restricted groups....
>
>Any other ideas anybody?

Two ideas come to mind:

	Use something like RFC931 authentication to verify users (although
RFC931 is really an identification protocol, not an authentication protocol).

	Make a setuid news reader that only people in a special group can
execute, and have the reader bind to a reserved local port, and have the
NNTP server check for a reserved remote port.

Both of these ideas have plenty of problems (an understatement :-) ), but
they would work (at least, I can't see any problems).

--Ken