[Bug nis/34508] New: Stub out the NIS+ client
fweimer at redhat dot com via Glibc-bugs <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.bugs |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
https://sourceware.org/bugzilla/show_bug.cgi?id=34508
Bug ID: 34508
Summary: Stub out the NIS+ client
Product: glibc
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: nis
Assignee: unassigned at sourceware dot org
Reporter: fweimer at redhat dot com
CC: kukuk at suse dot de
Target Milestone: ---
Flags: security-
We should remove (stub out) the NIS+ client code. It has many vulnerabilities,
but it is believed to be unusable due to lack of server implementations.
Per Torsten Kukuck in bug 34067:
“
> While you write "never a fully working client" I think that a NIS+ Linux
> client existed and these APIs provided some initial support?
There where two PoC, one created by I think a FreeBSD developer and one by me.
But booth got never finished. The BSD development stopped already 28 years ago.
You could do some rudimentary tasks with my implementation, but it was not
really usable in production.
I heard from a third implementation, but that was closed source, wasn't based
on glibc and I personal never saw it.
SUN deprecated NIS+ 2004, too, since their customers preferred LDAP. So I have
my doubts that after over 20 years there is any running NIS+ server left
anywhere. And without a Solaris NIS+ server, the Linux client will not work.
”
--
You are receiving this mail because:
You are on the CC list for the bug.