[LON-CAPA-admin] changing ip address

[Guy Albertelli II]

Hi Hon-Kie, 


> Yes, the 0.x and 1.x versions of LON-CAPA check both IP and name. The  
> 2.x version does not do this anymore.

Gerd is almost correct here.

LON-CAPA does check IP addresses in all releases. in 0.X and 1.X it
checked that the static number in the hosts.tab file and that the
Forward DNS and the Reverse DNS on that numbe matched and that the
contacting machine was in the hosts.tab file.


In 2.0 it now does a hostname to IP number lookup at webserver startup
and then uses that IP address to verify that the IP of the contacting
machine is allowed to request what it is requesting.

So when a machine changes IP addresses it will require a webserver
restart on the remote machines for the moved machine to be trusted.

I'm likely to add to the nightly loncron script something to cause it
to update the IPs nightly but hadn't gotten to that yet.


> > Does lon-capa still perform an ip check? The fsuK12 servers were  
> > moved to a different network (new ip addresses) and now they cannot  
> > access anything outside the domain. -hk
> >

-- 
guy at albertelli.com   0-7-2-1-27,137