On 2003.11.02, Tom Jackson <[EMAIL PROTECTED]> wrote:
> On Sat, 2003-11-01 at 23:43, Dossy wrote:
> > On 2003.10.29, Tom Jackson <[EMAIL PROTECTED]> wrote:
> > > This is the perfect place to put sensitive data and pass it to
> > > AOLserver via environment variables.
> >
> > Please don't say "pass sensitive data via environment variables."  On a
> > Linux box, try "ps e" ...
>
> Thanks Dossy! Good idea about just sourcing the file, that should work
> perfectly. I wish the ssl files could use the same trick, I think those
> get sourced after the process changes user/group.

You can.  Source in your config. early on that sets some variables (or
builds lists of lists, etc.) -- then, simply use those vars in the files
you want after the process drops privs.

> So I was wondering if it would be useful to move all editable vars out
> of the main startup and into separate files. Then there would be minimal
> overlap for different servers sharing startup scripts.

Or, since the config script is just another Tcl script, treat it as
such: write it as a program that can do the necessary introspection to
determine what machine it's running on, what it's supposed to do, what
modules it needs to load, etc.

I have my setup installed in /home/aolserver, and there's a
/home/aolserver/nsd.tcl which has a block in it like this:

    foreach server [glob -nocomplain config/servers/*] {
      source $server
    }

My various servers are defined in /home/aolserver/config/servers/, so
startup is just "./start -s servername", etc.

-- Dossy

--
Dossy Shiobara                       mail: [EMAIL PROTECTED]
Panoptic Computer Network             web: http://www.panoptic.com/
  "He realized the fastest way to change is to laugh at your own
    folly -- then you can let go and quickly move on." (p. 70)


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.

Reply via email to