[krbdev.mit.edu #6369] lib/rpc should have way to register with	secure rpcbind using unix domain socket 
    Ezra Peisach via RT 
    rt-comment at krbdev.mit.edu
       
    Thu Feb  5 14:05:16 EST 2009
    
    
  
Under fedora 10 and other OS's - portmap has been replaced by rpcbind.
Security considerations have "improved" - requiring a loopback socket
and a reserved port (<1024) unless certain flags are given.
Looking at the sources for rpcbind - there is now support for a unix
domain socket connection - which is known to be local - and does not
therefore require a reserved port.
Either the rpc layer should be replaced with a newer implementation or 
the library could be shoehorned to attempt to use a unix domain socket
if present.
 
    
    
More information about the krb5-bugs
mailing list