http://turin.nss.udel.edu/wiki/pgipfauth/ Fri, 11 Jan 2013 11:42:31 -0500 FeedCreator 1.7.2-ppt DokuWiki http://turin.nss.udel.edu/wiki/pgipfauth/lib/images/favicon.ico http://turin.nss.udel.edu/wiki/pgipfauth/ http://turin.nss.udel.edu/wiki/pgipfauth/doku.php?id=download Version 0.1 FilenameDescriptionpgipfauth-01.tar.bz2pgipfauth version 0.1, source frey Tue, 07 Apr 2009 10:08:26 -0500 http://turin.nss.udel.edu/wiki/pgipfauth/doku.php?id=versions:0.1 This document contains information pertinent to the pgipfauth (version 0.1) executable. The Command Line The pgipfauth daemon accepts the following command line options: usage: /usr/local/pgipfauth/current/bin/pgipfauth {options} options: --help/-h this info --quiet/-q don't print anything except critical information --annoying/-a print so much that the sysadmin will go crazy trying to read our log files --dae… frey versions Tue, 07 Apr 2009 09:37:12 -0500 http://turin.nss.udel.edu/wiki/pgipfauth/doku.php?id=documentation:cache_coherence It is quite possible that the following situtation could arise: * A user attempts to connect to the IPF host and is blocked since his/her IP is not in the authorization table * User adds his/her IP address to the authorization table * User attempts to connect again, and is still blocked; user must wait at most the cache TTL for his/her traffic to pass frey documentation Tue, 07 Apr 2009 09:21:28 -0500 http://turin.nss.udel.edu/wiki/pgipfauth/doku.php?id=documentation:authsql IP authorization uses the following SQL statement: SELECT pgipfAuthorize($1,$2) A sample SQL table and pgipfAuthorize function are worth a thousand words of prose description: CREATE TABLE validIPAddresses ( hostAddress INET UNIQUE NOT NULL ); CREATE LANGUAGE plpgsql; CREATE FUNCTION pgipfAuthorize(INET,INTEGER) RETURNS BOOLEAN AS $$ DECLARE aRow RECORD; remoteIP ALIAS FOR $1; serverPort ALIAS FOR $2; BEGIN SELECT * INTO aRow FROM validIPAddresses WHERE hos… frey documentation Tue, 07 Apr 2009 09:09:06 -0500 http://turin.nss.udel.edu/wiki/pgipfauth/doku.php?id=documentation:start This area of the site includes all non-version-specific documentation. * Authorization SQL & Host-Groups for pgipfauth * Cache coherence issues in pgipfauth frey documentation Tue, 07 Apr 2009 09:03:09 -0500 http://turin.nss.udel.edu/wiki/pgipfauth/doku.php?id=start Here at the University of Delaware we were looking for a way to lock-down our campus license server to off-campus IPs. The particular way that we run FlexLM leaves all of the vendor sub-daemons registered on random TCP ports, making a strict and static software firewall setup inaccessible. frey Tue, 07 Apr 2009 08:30:33 -0500