On 21 May 2010 01:52, Damjan <[email protected]> wrote: >> I need this to use ClearCase (cleartool binary). ACL in ClearCase >> based on Unix system groups but it get only first 16 groups. So If >> user belongs to 50 groups You must before using cleartool eject 34 >> groups and leave only 16. And I need to choose "few" groups in WSGI >> which will be inherit by WSGI child process. Then my application may >> read ClearCase repositories. > > use sudo
Care to explain how that can help? First off I don't see how sudo allows you override the group vector it uses with a restricted set of users that you can define. It does have a -P option for preserving the vector group of the person executing sudo, but if you cant control that persons group vector isn't going to help. Secondly, use of sudo, even if it could do it, would still require separate Apache instances and be just like the 'flash' program they use now. Finally, what is really needed is the C API programmatic way of modifying the group vector, just as the flash program somehow does. Only then could mod_wsgi be enhanced, if it made any sense, to allow different daemon process groups to override the group vector. Graham -- You received this message because you are subscribed to the Google Groups "modwsgi" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/modwsgi?hl=en.
