I've uploaded another snapshot to <http://dl.gna.org/munge/alpha/>.
I've added the following cmdline opts to munged. This makes it easier
than having to twiddle munge_defs.h and recompile, etc.
--check-group-mtime=<boolean>
Specify whether the modification time of "/etc/group"
should be checked before updating the supplementary group
membership mapping. If this value is non-zero, the check
will be enabled and the mapping will not be updated unless
the file has been modified since the last update.
--group-update-time=<integer>
Specify the number of seconds between updates to the
supplementary group membership mapping; this mapping is
used when restricting credentials by GID. A value of
0 causes it to be computed initially but never updated
(unless triggered by a SIGHUP). A value of -1 causes it
to be disabled.
One of these days, I'll get around to adding a config file.
Until then, you can add the options to /etc/{default,sysconfig}/munge.
I still need to look into why the gids mapping update ran repeatedly
under NIS (presuming the /etc/group mtime didn't change). And I'll
do some more testing on all of this tomorrow.
-Chris
_______________________________________________
munge-users mailing list
[email protected]
https://mail.gna.org/listinfo/munge-users
