[BUG] Problem with multi-server

[ReneDx]

Hello,

I was today searching on my domains and saw somthing weird. When multi-server is on, with domain check. You can create sub-domains without being admin of the account.

If i add domain "mainweb.com" on server 1, and add "me.mainweb.com" on server 2, it ill work. But thats abusement, other ppl can create sub-domains from domains that not on there domain list.

I don't know where to report bugs, but you just need to know which domains on the server, and you can abuse it on the simple way ever.

Edit:
Even with DNS servers it works, it makes a new .db file..

 

[nobaloney]

How would you create a subdomain? Do you mean create it as it's own domain, or do you mean you can create the domain, and then subdomains?

Actually there's no easy way to solve the problem except to update the list of domains not allowed to be created on the server.

The problem is that DNS records exist on both servers, and both servers duplicate DNS across both domains.

And any domain can be created on any server.

Jeff

 

[ReneDx]

You can create sub-domains as domains, thats the "bug". Because on that way you can "steal" sub-domains from other domains that are not in your domain list.

And if you got a sub-domain limit but not a domain limit, you don't have a sub-domain limit because you can create sub-domaisn as domains.

 

[nobaloney]

It's not a bug. It's a feature. And no, I'm not being funny. It's a very important feature. If it didn't exist I couldn't possibly use DirectAdmin, and probably very few of my resellers could.

But let's presume it wasn't an important feature... how would you implement it?

DirectAdmin has no idea what's a subdomain and what isn't, because there's no standard on multi-level domains.

Is domains.nobaloney.net a subdomain?

Is nobaloney.co.uk a subdomain?

How would you expect DirectAdmin to know the difference?

Jeff

 

[mauro33]

hi,

I reopen this old thread, because I cant find workaround of this featured/"bug".

I dont want a user "peter" in server B can registered a domain "test.fred.com", because user fred is in the server A and his is the owner of the domain fred.com, not peter in server B.

this not work, if both user are in the same server thanks to this featured:

http://www.directadmin.com/features.php?id=925

but again, if the scenary are two user in diferent server and multiserver is enable, user peter can registered a domain who below to user fred.

there must be a way to fix this, because suppose you have a very important user, like a Bank, domain bank.com in server A, any user in server B can register a domain "loginhere.bank.com" without a problem