>Number:         3870
>Category:       lib
>Synopsis:       yp domains are not internet name domains, rfc1035 is not applicable
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    lib-bug-people (Library Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jul 15 13:35:02 1997
>Last-Modified:
>Originator:     
>Organization:
none
	
>Release:        19970714
>Environment:
	
System: NetBSD pisarro.op.net 1.2G NetBSD 1.2G (PISARRO) #47: Tue Jul 15 12:42:14 EDT 1997 jaw@pisarro.op.net:/usr/src/NetBSD-current/src/sys/arch/sparc/compile/PISARRO sparc


>Description:
	
	yp_invalid_domain wants the yp domain to be an rfc 1035 compliant
	domain name. yp domains are opaque tokens with no relation to
	the domain names of rfc 1035. most sites using yp, use a yp
	domain name consisting of random gibberish not resembling an
	internet domain name (esp. those sites with any concerns of
	security).

>How-To-Repeat:
	
	use yp.
	have a yp domain that looks like gibberish.
	make build, reboot.
	watch ypbind complain.

>Fix:
	
	replace _yp_invalid_domain() with:

	_yp_invalid_domain(dom){
		return 0;
	}



>Audit-Trail:
>Unformatted: