Slinky wrote:


On 31/03/2008, *Michael DeHaan* <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:


-slash-

    The command line has none of these restrictions so you can always
    recover/reconfigure things with root if you find you've somehow locked
yourself out.

Will this always been the case? We'd like to see the same ownership model apply to the webui and CLI.

Originally I wasn't planning on adding auth to the command line. Interesting idea.

You could also perhaps get away with making a simple remote command line that only contained the features you needed and used the existing XMLRPC/CobblerWeb code as a basis. It would have to accept a username and password, possibly from doing something like reading ~/.cobbler.rc or something? If it didn't have to do things like "import" it would be pretty simple.

There are more complicated alternatives involving ACLs and setuid (non root), but I think I like that solution better.

Thoughts?



    (It's also coded up so you can't use the WebUI to remove
    your own access from an object).


^ see above




------------------------------------------------------------------------

_______________________________________________
et-mgmt-tools mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/et-mgmt-tools

_______________________________________________
et-mgmt-tools mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/et-mgmt-tools

Reply via email to