[Nut-upsuser] "Master privileges unavailable on UPS" after upgrade to Debian Lenny
Arjen de Korte
nut+users at de-korte.org
Mon Mar 9 11:46:34 UTC 2009
Citeren Arnaud Quette <aquette.dev op gmail.com>:
>> upsd.conf
>> #########
>> ACL all 0.0.0.0/0
>> ACL localhost 127.0.0.1/32
>> ACL localhost2 127.0.1.1/32
>> ACL nobodynet 10.9.2.0/24
>> #ACCEPT <http://10.9.2.0/24%0A#ACCEPT> all
>> ACCEPT localhost
>> ACCEPT nobodynet
>> ACCEPT localhost2
>> REJECT all
>>
>
> try putting all ACCEPT on the same line, ie:
> ACCEPT localhost nobodynet localhost2
>
> and restart nut.
That might help if NUT would use the ACCEPT mechanism in the allowfrom
processing (which is not the case).
To help people out that find this thread through a search tool, I'll
explain it once more. In NUT versions earlier than 2.4.0 (where we
dropped the ACL mechanism), ACCEPT/REJECT (in upsd.conf) will
determine if a connection is allowed in the first place. In order to
set master privileges on a UPS, you first need a connection (so there
must be a matching ACCEPT before a possible REJECT) but after that you
only need to match the 'allowfrom' (in upsd.users) for the user that
made the connection. The allowfrom processing only uses the ACL line
from upsd.conf, not ACCEPT/REJECT lines.
Best regards, Arjen
--
Please keep list traffic on the list
More information about the Nut-upsuser
mailing list