Bug#455264: openais: add ais user
You are the first person requesting this. well, i'm the second one then ;-) Regarding the use of it: i am using a fully OpenAIS based version of clvm (to avoid having to deal with cman and fencing etc) following these instructions http://h2o.glou.fr/post/2009/04/20/clvm-openais-on-Debian/Lenny http://www.pixelchaos.net/2009/04/23/openais-an-alternative-to-clvm-with- cman/ The open ais user is still not used as described there (aisexec runs as root), but as far as i understand required for starting anyway (didn't check that yet). Anyways, running daemos as non-priviledged users is always a good security policy, and coupling that ais user with secauth: on should be the final target. Having in the package the init.d script for aisexec (the one provided in the URL above is quite nice) --but not started by default, say /etc/defaults/openais--- would also be nice! Thanks for your packaging work, Ariel -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#455264: openais: add ais user
On Sun, Dec 09, 2007 at 07:52:04PM +0100, Guido Guenther wrote: Because people want to run aisexec without cman and aisexec wants the ais user by default. But please don't bother I keep the patches around here locally. You are the first person requesting this. Bastian -- Superior ability breeds superior ambition. -- Spock, Space Seed, stardate 3141.9 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#455264: openais: add ais user
On Mon, Dec 10, 2007 at 01:36:02AM +0100, Frederik Schueler wrote: For what purpose? Does the future openais based heartbeat implementation require an aisexec user? It seems to use an already running copy. We can also use nobody as default user, it always exists. Bastian -- The sight of death frightens them [Earthers]. -- Kras the Klingon, Friday's Child, stardate 3497.2 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#455264: openais: add ais user
On Mon, Dec 10, 2007 at 11:39:14AM +0100, Bastian Blank wrote: On Sun, Dec 09, 2007 at 07:52:04PM +0100, Guido Guenther wrote: Because people want to run aisexec without cman and aisexec wants the ais user by default. But please don't bother I keep the patches around here locally. You are the first person requesting this. Somebody has to be the first ;) I think ubuntu does the same and I vaguely remember the original ITP discussed this too. Why shouldn't we add a user if it helps the installation? And it does no harm if one runs redhat-cluster on top of this. Cheers, -- Guido -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#455264: openais: add ais user
Package: openais
Version: 0.82-2
Severity: whishlist
Tags: patch
Hi,
this patch adds/removes the openais user - the default user aisexec
wants to run as if not started via e.g. cman. Please apply.
Cheers,
-- Guido
diff --git a/debian/control b/debian/control
index 75abac2..10df458 100644
--- a/debian/control
+++ b/debian/control
@@ -9,7 +9,7 @@ Build-Depends: dpatch, debhelper ( 5)
Package: openais
Section: admin
Architecture: any
-Depends: ${shlibs:Depends}, libopenais2 (= ${binary:Version})
+Depends: ${shlibs:Depends}, libopenais2 (= ${binary:Version}), adduser
Description: Standards-based cluster framework (daemon and modules)
The openais project is a project to implement a production quality
Revised BSD licensed implementation of the SA Forum's Application
diff --git a/debian/openais.postinst b/debian/openais.postinst
new file mode 100644
index 000..617b908
--- /dev/null
+++ b/debian/openais.postinst
@@ -0,0 +1,42 @@
+#!/bin/sh
+# postinst script for openais
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+#* postinst `configure' most-recently-configured-version
+#* old-postinst `abort-upgrade' new version
+#* conflictor's-postinst `abort-remove' `in-favour' package
+# new-version
+#* postinst `abort-remove'
+#* deconfigured's-postinst `abort-deconfigure' `in-favour'
+# failed-install-package version `removing'
+# conflicting-package version
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case $1 in
+configure)
+ if ! getent passwd ais /dev/null; then
+ adduser --group --system ais --home=/usr/lib/openais
--no-create-home
+ fi
+;;
+
+abort-upgrade|abort-remove|abort-deconfigure)
+;;
+
+*)
+echo postinst called with unknown argument \`$1' 2
+exit 1
+;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/openais.postrm b/debian/openais.postrm
new file mode 100644
index 000..1eb2f13
--- /dev/null
+++ b/debian/openais.postrm
@@ -0,0 +1,40 @@
+#!/bin/sh
+# postrm script for openais
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+#* postrm `remove'
+#* postrm `purge'
+#* old-postrm `upgrade' new-version
+#* new-postrm `failed-upgrade' old-version
+#* new-postrm `abort-install'
+#* new-postrm `abort-install' old-version
+#* new-postrm `abort-upgrade' old-version
+#* disappearer's-postrm `disappear' overwriter
+# overwriter-version
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case $1 in
+purge)
+ deluser --quiet --system ais
+;;
+remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
+;;
+
+*)
+echo postrm called with unknown argument \`$1' 2
+exit 1
+;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#455264: openais: add ais user
tags 455264 wontfix thanks On Sun, Dec 09, 2007 at 05:08:39PM +0100, Guido Guenther wrote: this patch adds/removes the openais user - the default user aisexec wants to run as if not started via e.g. cman. Please apply. There is currently no user of this except cman. Please provide a rational why the package should generate something which is not used? Bastian -- There is a multi-legged creature crawling on your shoulder. -- Spock, A Taste of Armageddon, stardate 3193.9
Bug#455264: openais: add ais user
On Sun, Dec 09, 2007 at 05:41:05PM +0100, Bastian Blank wrote: tags 455264 wontfix thanks On Sun, Dec 09, 2007 at 05:08:39PM +0100, Guido Guenther wrote: this patch adds/removes the openais user - the default user aisexec wants to run as if not started via e.g. cman. Please apply. There is currently no user of this except cman. Please provide a rational why the package should generate something which is not used? Because people want to run aisexec without cman and aisexec wants the ais user by default. But please don't bother I keep the patches around here locally. -- Guido -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#455264: openais: add ais user
Hi, On Sun, Dec 09, 2007 at 07:52:04PM +0100, Guido Guenther wrote: There is currently no user of this except cman. Please provide a rational why the package should generate something which is not used? Because people want to run aisexec without cman and aisexec wants the ais user by default. For what purpose? Does the future openais based heartbeat implementation require an aisexec user? Best regards Frederik Schüler -- ENOSIG signature.asc Description: Digital signature
