ident - nnrpd ident resolver

ident [-p port] [-t]

This program attempts to resolve usernames for nnrpd by using the ident protocol to query the remote host. It contacts the remote host using either IPv4 or IPv6 depending on which protocol was used for the incoming NNTP connection.

-p port

If this option is given, attempt to contact identd on the specified remote port (which can be a numeric or symbolic specification). Non-numeric values will be looked up using getservbyname(3). The default value is the result of CWgetservbyname("ident") if available, or port 113 otherwise.

-t

If this option is given, the identity returned will never have a domain part. That is, if the remote server returns a result containing an CW@ character, ident truncates the response at the CW@. This is useful to allow the default-domain parameter in reaers.conf to override the domain supplied by the remote host (particularly if the supplied domain part is an unqualified local machine name rather than a full domain name).

The following readers.conf(5) fragment tells nnrpd to trust ident information for hosts on a local network, but to replace the domain returned from the ident query:

    auth LAN {
        hosts: "192.168/16"
        res: "ident -t"
        default-domain: "internal.example.com"
    }

    access LAN {
        users: "*@internal.example.com"
        newsgroups: example.*
    }

Access is granted to the example.* groups for all users on the local network whose machines respond to ident queries.

This documentation was written by Jeffrey M. Vinocur <jeff@litech.org>.

$Id: ident.8,v 1.1 2002/12/12 23:07:49 vinocur Exp $

nnrpd(8), readers.conf(5)