WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-api

Re: [Xen-API] Access rights to domU

To: "Richard Hartmann" <richih.mailinglist@xxxxxxxxx>
Subject: Re: [Xen-API] Access rights to domU
From: Tom Wilkie <tom.wilkie@xxxxxxxxx>
Date: Thu, 5 Jul 2007 15:33:29 +0100
Cc: Xen-API <xen-api@xxxxxxxxxxxxxxxxxxx>
Delivery-date: Thu, 05 Jul 2007 07:31:06 -0700
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=NkkaiNaAfAueWlVYkgchdMK6auOCof++nhlvWH+mEQXRLibfMhwUyYmM1PYXUWncjkNtQAaaKUVhe4C2yOSPmcejlfPWvY8DN3Pxft+ZwCFdTLxNS+kq5aNK4527CoE7xCG/jCqANb2eetoBlXJi5fLnhYAEUcbrGtUy/Y13AfY=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=TVbiOKc4/jUMwK8n1xdT9mX2ksvOu4bZZkNeBcRFFCVpI/lJcZaJMpG7F1ITHN++46/xO6mjdtc19sif9MZNk4I1hM9+Eoelgkuev0y4WT4LosZMctAW8oEmnlYUgnnhgsEu0dtapwXCCDbnoTgDqZXMAOgBOMAAwwY0NPjy9OY=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <2d460de70707050654xdb76160uc38f95f75bd143c@xxxxxxxxxxxxxx>
List-help: <mailto:xen-api-request@lists.xensource.com?subject=help>
List-id: Discussion of API issues surrounding Xen <xen-api.lists.xensource.com>
List-post: <mailto:xen-api@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api>, <mailto:xen-api-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api>, <mailto:xen-api-request@lists.xensource.com?subject=unsubscribe>
References: <2d460de70707050637o2ab82b55we514d0852d58068a@xxxxxxxxxxxxxx> <B32E7FC3-87F6-46E3-A1A2-B7F4FFDF4ED3@xxxxxxxxx> <2d460de70707050654xdb76160uc38f95f75bd143c@xxxxxxxxxxxxxx>
Sender: xen-api-bounces@xxxxxxxxxxxxxxxxxxx
No not really. When we asked for comments nobody said they'd like this feature, so we didn't plan for it. If you want to propose some changes (and dare I say do an implementation?) then I'm sure it would be welcome.

As far as I'm aware, PAM is pluggable, so you could quite easily swap out the login module for a db module, say. This should get around your concerns.

Tom

On 5 Jul 2007, at 14:54, Richard Hartmann wrote:

Hi Tom,

is there any ETA on resolving this?
Also, is there a replacement for PAM planned? As that other guy
on the list pointed out, the login module is not only not useful, it is
actually harmful (unless you could give them /bin/false as shell, but
in this case, the PAM module will deny the request. Thus, back to
square one).


Richard :)


_______________________________________________
xen-api mailing list
xen-api@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api

<Prev in Thread] Current Thread [Next in Thread>