Thursday 22 September, vers 8h, Sylvain Beucler écrivit :

> On Thu, Sep 22, 2005 at 08:13:53AM +0200, Mathieu Roy wrote:
> > Wednesday 21 September, vers 19h, Sylvain Beucler écrivit :
> > 
> > > > Instead, do a perl script using the backend to extract the
> > > > list of members of the www group and do the appropriate
> > > > useradd.  So you wont have to maintain a patch, only a
> > > > script. We have at gna a set of scripts that use the backend
> > > > but would not make sense to be published with Savane that fits
> > > > this kind of purpose.
> > > 
> > > As I said, that custom useradd will trigger ~100 userdel per
> > > project on the next sv_groups/users cron job.
> > 
> > But why does it have to do that each time, and not only when a new
> > group gets created?
> 
> My custom script would add the webmasters to each GNU project's
> system group. The next backend run will compare the group in the DB
> and in the system; the webmasters are not part of each GNU project
> in the DB, and will be erased from the system group.
> Then my custom script would come and re-add them. Then the DB would
> remove them again. etc. :)

Hum, obvious and annoying. 

Another less ugly solution would be to force GNU projects to have 2
savane accounts, one "$project" and another called "www-$project"
(with only CVS as active feature), and have a simple homemade backend
script that would add all members of the WWW group to add www-$project
groups, in the database. So you would not have to make with the actual
useradd/usermod stuff.

You just have to get a script clever enough to notice when there is a
user added or removed in the WWW group, so it updates all www-$project
groups.

That would be clean and sensible. But indeed, it will mean that you'll
have to create www-$projects. 
Somehow, you can maybe also write another little script that would
review groups of the gnu type, and create the www-$project if missing,
by setting everything up.

There an additional plus: GNU packages could maintain separate list
from people that have write access on the repos and the ones that have
write access to the webpages.




-- 
Mathieu Roy

  +---------------------------------------------------------------------+
  | General Homepage:           http://yeupou.coleumes.org/             |
  | Computing Homepage:         http://alberich.coleumes.org/           |
  | Not a native english speaker:                                       |
  |     http://stock.coleumes.org/doc.php?i=/misc-files/flawed-english  |
  +---------------------------------------------------------------------+

Reply via email to