ROSA Linux Bugzilla – Bug 5278
[UPDATE REQUEST] ypbind
Last modified: 2015-03-26 17:17:27 MSK
The current version of ypbind-mt is: 2.2
The last ipv4 only version of ypbind-mt is: 1.38. Rosa carries version 1.37
The ypbind-mt package contains a multithreaded ypbind daemon for Linux. It uses threads for better response and supports the ypbind protocols version 1, 2 and 3. A list of features from this new implementation:
Supports protocol v3 and IPv6.
Supports bindings to multiple domains.
Supports /var/yp/binding/* file for Linux libc 4/5 and glibc 2.x.
Supports a list of known secure NIS server (/etc/yp.conf)
ypbind-mt needs on Linux a TI-RPC library and libnis from yp-tools.
It may be a security vulnerability to have a version that old still in circulation.
Yes, we should update all our YP packages.
Maybe we should also move these packages from main to contrib repository? NIS doesn't seem to be very popular nowadays.
Thats probably prudent. The only thing still used is the NIS LDAP Schema, which is part of OpenLDAP to simulate that functionality to the Name Service Switch (Netgroups, Automounts, etc.) but the YP Protocol is almost never used. Regardless. I don't want Sun RPC Attack vectors (Port 111) Left Vectors left unpatched. One of the first times I ever had a machine truly comprimised was on RedHat 6.2 because of Sun RPC Port 111 in NIS/YP.
Done. Updated and moved to contrib.