[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-API] Access rights to domU


  • To: "Richard Hartmann" <richih.mailinglist@xxxxxxxxx>
  • From: Tom Wilkie <tom.wilkie@xxxxxxxxx>
  • Date: Thu, 5 Jul 2007 15:33:29 +0100
  • Cc: Xen-API <xen-api@xxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Thu, 05 Jul 2007 07:31:06 -0700
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=TVbiOKc4/jUMwK8n1xdT9mX2ksvOu4bZZkNeBcRFFCVpI/lJcZaJMpG7F1ITHN++46/xO6mjdtc19sif9MZNk4I1hM9+Eoelgkuev0y4WT4LosZMctAW8oEmnlYUgnnhgsEu0dtapwXCCDbnoTgDqZXMAOgBOMAAwwY0NPjy9OY=
  • List-id: Discussion of API issues surrounding Xen <xen-api.lists.xensource.com>

No not really. When we asked for comments nobody said they'd like this feature, so we didn't plan for it. If you want to propose some changes (and dare I say do an implementation?) then I'm sure it would be welcome.

As far as I'm aware, PAM is pluggable, so you could quite easily swap out the login module for a db module, say. This should get around your concerns.

Tom

On 5 Jul 2007, at 14:54, Richard Hartmann wrote:

Hi Tom,

is there any ETA on resolving this?
Also, is there a replacement for PAM planned? As that other guy
on the list pointed out, the login module is not only not useful, it is
actually harmful (unless you could give them /bin/false as shell, but
in this case, the PAM module will deny the request. Thus, back to
square one).


Richard :)


_______________________________________________
xen-api mailing list
xen-api@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-api


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.