On Wed, May 23, 2001 at 02:13:11AM -0700, Nilesh Naik wrote:
> Hi friends 
> 
hi back,

your right, there is a problem in the resolver code (accepts only one to
one matches).

To fix your problem just remove the following lines in 
checkpassword.c (line 550):
        if ( ip.len != 1 ) {
                qldap_errno = BADCLUSTER;
                auth_error();
        }

With this removed it is no longer possible to check if your cluster setup
was correct. Before all clusternodes had one IP so you can detect if
somebody tries to use your master DNS name as "mailhost".
Sidenote: qmail-qmqpc.c (mail forwarder) didn't had this check.

qmail-ldap will always use the first ip address ip.ix[0].ip so the RR
done on the dns server will be passed to checkpassword.c else
checkpassword.c will always connect to the same host. I did not test if
this is correct.

-- 
later
Claudio

mailto:[EMAIL PROTECTED]

Reply via email to