GitHub - norriscm/cnidentd: A small but modular and fully-functional ident server in Haskell

norriscm / cnidentd Public

Notifications You must be signed in to change notification settings
Fork 0
Star 1

A small but modular and fully-functional ident server in Haskell

identd.cainnorris.net

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 22 Commits
.gitignore		.gitignore
CNidentd.cabal		CNidentd.cabal
CNidentd.hs		CNidentd.hs
LinuxIdentHandler.hs		LinuxIdentHandler.hs
OSXIdentHandler.hs		OSXIdentHandler.hs
README		README
Setup.lhs		Setup.lhs
TestIdentHandler.hs		TestIdentHandler.hs
UNIXIdentHandler.hs		UNIXIdentHandler.hs

Repository files navigation

cnidentd
========
A small, simple ident server in Haskell

cnidentd is a small ident server written in Haskell.  It is modular, multithreaded, and RFC 1413 compliant.

cnidentd supports modular ident providers, supporting multiple strategies (and platforms) for supplying ident information.  A simple, single-static-user provider is included, as well as fully-functioning providers for OS X and Linux.  The providers for OS X and Linux spawn a subprocess to actually figure out the user associated with a connection, and read back in the value.  On Linux this may be brittle due to lack of testing with various distributions' lsof versions.

cnidentd must currently be run as root.  On OS X, privilege dropping should be simple.  On Linux, lsof needs root to access other users' connections, so privilege dropping may not be feasible.

The build is cabalized.