Gentoo Archives: gentoo-security

From: Paul de Vrieze <pauldv@g.o>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] PAM takes a long time [solved].
Date: Fri, 09 Apr 2004 12:19:03
Message-Id: 200404091418.32381.pauldv@gentoo.org
In Reply to: Re: [gentoo-security] PAM takes a long time [solved]. by Volkov Peter Alexandrovich
1 On Friday 09 April 2004 14:22, Volkov Peter Alexandrovich wrote:
2 > Hi again. I thank gentoo-security mailing list members for attention and
3 > help in solving my problem.
4 >
5 > Maybe this is a bit of "academical" interest, but maybe someone can explain
6 > me or may be a hyperlink...
7 >
8 > I can set /etc/hosts and inspect /etc/nsswitch.conf for configuration, so
9 > to make my computer look at hosts file first. And soon I'm going to setup
10 > local DNS server. And this of course solve my problem with delays.
11 >
12 > But one question remains. Why to login localy my station asks DNS? I
13 > thought that login program (with or without PAM) needs only login and
14 > password, then it compare it (of cource encrypted password) with items in
15 > the /etc/shadow and /etc/passwd file and with match login allows me to
16 > enter system.
17 >
18 > What information login program needs to know from DNS to authenticate me?
19 >
20 > Or more general. Why authentification with PAM needs some information from
21 > DNS and what is this information?
22
23 Most of the time the logs are configured to find out the host name from which
24 you logged in. Host names make more sense than ip addresses for most people.
25
26 Paul
27
28 --
29 Paul de Vrieze
30 Gentoo Developer
31 Mail: pauldv@g.o
32 Homepage: http://www.devrieze.net