We are in the process of moving from NIS to LDAP and one issue I've seen
is that some clients will go through an infinite loop of hostname
lookups if they are configured to use ldap for hosts resolution in their
nsswitch.conf. This can be worked around quite easily on the client
side, but one thing that concerns me is the potential for DoS
(especially when there are people running around that like to play
admin).
Does Fedora-DS have any way of limiting the number of connections
serviced from a given IP address?
Thanks,
Steve
Show replies by date