Re: [zones-discuss] Account in global and non-global zone

2008-04-29 Thread Steffen Weiberle
Andrew Black wrote:
> Steffen Weiberle <[EMAIL PROTECTED]> wrote in news:48170EEA.5070009
> @sun.com:
> 
>> Yes, I have done this. I duplicate the passwd/shadow entries in /etc/ 
>> into /root/etc/ and lofs mount the home directory into the 
>> non-global zone.
> 
> Is it OK for root on the global zone to write into /root/etc/ or 
> does this need to be done within the zone itself.

I find this to be one of the great ease-of-administration features using 
zones. Using zlogin is an alternative, and may be easier to audit. That 
only works on running zones.

Steffen

> ___
> zones-discuss mailing list
> zones-discuss@opensolaris.org

___
zones-discuss mailing list
zones-discuss@opensolaris.org


Re: [zones-discuss] Account in global and non-global zone

2008-04-29 Thread Andrew Black
Steffen Weiberle <[EMAIL PROTECTED]> wrote in news:48170EEA.5070009
@sun.com:

> Yes, I have done this. I duplicate the passwd/shadow entries in /etc/ 
> into /root/etc/ and lofs mount the home directory into the 
> non-global zone.

Is it OK for root on the global zone to write into /root/etc/ or 
does this need to be done within the zone itself.

___
zones-discuss mailing list
zones-discuss@opensolaris.org


Re: [zones-discuss] Account in global and non-global zone

2008-04-29 Thread Steffen Weiberle
Andrew Black wrote:
> Is there an easy way to create a user account in a non global zone that 
> replicates an existing account in the global zone.
> 
> Using Solaris 10

Yes, I have done this. I duplicate the passwd/shadow entries in /etc/ 
into /root/etc/ and lofs mount the home directory into the 
non-global zone.

Since your desktop only runs in the global zone, there are no conflicts 
there, but other activities will be dealing with the same files, so you 
do need to be careful about shared writes to the same file, even things 
like .sh_history (or your shell's equivalent).

Instead of lofs of the home directory, you could also just do 
sub-directories that need to be shared, such as doc, src, foobar.

Steffen

> 
> ___
> zones-discuss mailing list
> zones-discuss@opensolaris.org

___
zones-discuss mailing list
zones-discuss@opensolaris.org