Suggested extension

[Peter Eriksson <[e-mail]>]

Why not add the following extension to the IDENT protocol:

Allow a query of the form:

	<port-on-server> , <port-on-client> , <remote-address> , <password>

in addition to the old <port-on-server> , <port-on-client> pair. And then 
selected hosts (according to a config file or something) can be
allowed to issue requests according to the one above to query an Ident
server about connections that it isn't part of. I would also like to
have a new error message "ACCESS-DENIED" to be used when a host not in
the config file issues an extended query.

An example:

	Say we have a host B (that runs an Ident server) on a network.
To that same network we also have host A that runs some kind of
network monitoring software set up so that it monitors all TCP
connections between host B and the rest of the world. Now with the
above extension one could configure the Ident server on host B to
allow host A to query it about which user id it was that originated
a certain connection.

/Peter


Peter Eriksson                                              [e-mail]
Lysator Academic Computer Society                 ...!uunet!lysator.liu.se!pen
University of Linkoping, Sweden                I'm still bored. Flame me again.