| 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 <2019> 2020 2021 2022 2023 2024 2025 | Index | 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 <2019> 2020 2021 2022 2023 2024 2025 |
| <== Date ==> | <== Thread ==> |
|---|
| Subject: | Re: [Merge] ~epics-core/epics-base/+git/asLib:as-hostname into epics-base:7.0 |
| From: | Bruce Hill via Core-talk <[email protected]> |
| To: | mdavidsaver <[email protected]> |
| Date: | Wed, 14 Aug 2019 06:10:31 -0000 |
Re the initial default for asCheckClientIP, I recommend it be set to 1. Defaulting to 0 only helps those who run w/o DNS yet also want to run EPICS 7 IOCs but continue to use CA instead of PVA to modify their access secured PVs. They also have an easy workaround by using IP addr in their acf files. Meanwhile, every site who tries to support access security w/ EPICS 7 could easily miss the need to set asCheckClientIP in order to make pvAccess support HAG based rules. It also has the benefit of closing the CA spoofed hostname vulnerability. -- https://code.launchpad.net/~epics-core/epics-base/+git/asLib/+merge/358822 Your team EPICS Core Developers is subscribed to branch epics-base:7.0.