diff options
| author | Sol Jerome <sol.jerome@gmail.com> | 2011-08-11 21:03:59 -0500 |
|---|---|---|
| committer | Sol Jerome <sol.jerome@gmail.com> | 2011-08-11 21:05:40 -0500 |
| commit | 5fe3867a3b75aff04eeb7ba8c910ee6939c1680f (patch) | |
| tree | c51844648207860428307bdc4b9dcc7e9bce3e1e /src/lib/Server/Core.py | |
| parent | 9ae39f3eff76015a45b30750cacc354d992c66b4 (diff) | |
| download | bcfg2-5fe3867a3b75aff04eeb7ba8c910ee6939c1680f.tar.gz bcfg2-5fe3867a3b75aff04eeb7ba8c910ee6939c1680f.tar.bz2 bcfg2-5fe3867a3b75aff04eeb7ba8c910ee6939c1680f.zip | |
Metadata: Better handling of floating cert-authenticated clients (Ticket #1030)
From the ticket:
A floating, cert-authenticated client can be not recognized properly by
hostname if it resolves to an arbitrary name in reverse DNS.
Background: Metadata.resolve_client, called from @exposed Core's
methods, falls back to reverse DNS lookup for client's name, because the
name is not preserved thanks to bailing off early from
Metadata.AuthenticateConnection.
(This issue can be related to #936.)
This patch enables caching of client names for cert-based floating
clients.
Signed-off-by: Sol Jerome <sol.jerome@gmail.com>
Diffstat (limited to 'src/lib/Server/Core.py')
| -rw-r--r-- | src/lib/Server/Core.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/Server/Core.py b/src/lib/Server/Core.py index 91b6a3555..2d735133b 100644 --- a/src/lib/Server/Core.py +++ b/src/lib/Server/Core.py @@ -365,7 +365,7 @@ class Core(Component): """Fetch probes for a particular client.""" resp = lxml.etree.Element('probes') try: - name = self.metadata.resolve_client(address) + name = self.metadata.resolve_client(address, cleanup_cache=True) meta = self.build_metadata(name) for plugin in self.plugins_by_type(Bcfg2.Server.Plugin.Probing): |