diff options
| author | Thorsten Kukuk <kukuk@suse.com> | 2023-08-03 17:11:32 +0200 |
|---|---|---|
| committer | Thorsten Kukuk <kukuk@suse.com> | 2023-08-03 17:42:57 +0200 |
| commit | 4ba3105511c3a55fc750a790f7310c6d7ebfdfda (patch) | |
| tree | 1808a9511ebff51d8d8aa4e9cb1ae6eab09a398e | |
| parent | 6caedeff52ee6ae5afce19d22798f895f101a1f1 (diff) | |
| download | pam-4ba3105511c3a55fc750a790f7310c6d7ebfdfda.tar.gz pam-4ba3105511c3a55fc750a790f7310c6d7ebfdfda.tar.bz2 pam-4ba3105511c3a55fc750a790f7310c6d7ebfdfda.zip | |
pam_access: document IPv6 link-local addresses (#582)
* modules/pam_access/access.conf.5.xml: Add example and note for IPv6
link-local addresses
* modules/pam_access/access.conf: Add example for IPv6 link-local
addresses
| -rw-r--r-- | modules/pam_access/access.conf | 3 | ||||
| -rw-r--r-- | modules/pam_access/access.conf.5.xml | 12 |
2 files changed, 14 insertions, 1 deletions
diff --git a/modules/pam_access/access.conf b/modules/pam_access/access.conf index 47b6b84c..9c8e2171 100644 --- a/modules/pam_access/access.conf +++ b/modules/pam_access/access.conf @@ -115,6 +115,9 @@ # User "john" should get access from ipv6 host address (same as above) #+:john:2001:4ca0:0:101:0:0:0:1 # +# User "john" should get access from ipv6 local link host address +#+:john:fe80::de95:818c:1b55:7e42%eth0 +# # User "john" should get access from ipv6 net/mask #+:john:2001:4ca0:0:101::/64 # diff --git a/modules/pam_access/access.conf.5.xml b/modules/pam_access/access.conf.5.xml index ff1cb223..2dc5d477 100644 --- a/modules/pam_access/access.conf.5.xml +++ b/modules/pam_access/access.conf.5.xml @@ -189,6 +189,12 @@ <para>+:john foo:2001:db8:0:101::1</para> <para> + User <emphasis>john</emphasis> and <emphasis>foo</emphasis> + should get access from IPv6 link local host address. + </para> + <para>+:john foo:fe80::de95:818c:1b55:7e42%eth1</para> + + <para> User <emphasis>john</emphasis> should get access from IPv6 net/mask. </para> <para>+:john:2001:db8:0:101::/64</para> @@ -222,6 +228,10 @@ item and the line will be most probably ignored. For this reason, it is not recommended to put spaces around the ':' characters. </para> + <para> + An IPv6 link local host address must contain the interface + identifier. IPv6 link local network/netmask is not supported. + </para> </refsect1> <refsect1 xml:id="access.conf-see_also"> @@ -246,4 +256,4 @@ introduced by Mike Becher <mike.becher@lrz-muenchen.de>. </para> </refsect1> -</refentry>
\ No newline at end of file +</refentry> |