----- Original Message -----
From: "Larry Clapp" <[EMAIL PROTECTED]>
To: "SSH Mailing List" <[EMAIL PROTECTED]>
Sent: Tuesday, February 20, 2001 11:21 PM
Subject: Re: ? change the default group id of SSH session


>
> On Tue, Feb 20, 2001 at 02:59:19PM -0000, Jakab Laszlo wrote:
> > I would like to make ssh (client) to show the user with
> > different group id (not the default).
> >
> > Let's say I have on the server :
> > user: _smith_
> > default group: _users_
> >
> > but smith and john are part of the group _operator_
> >
> > I'm wondering if is possible when smith is connecting to the
> > server with ssh to specify that now use the privileges of
> > _smith_ but from the group _operator_.  So the group privileges
> > to be set up as _operator_. In this way all the work of _smith_
> > can be accessed also by _john_.
>
> Is there some reason you can't *ask* Smith and John to run
> "newgrp operator" when appropriate?
>
> If there is, well, many shells support the use of an
> /etc/profile, which gets run before any user .profile scripts, so
> you could put in code to see if the user's connected via ssh ("ps
> -el | grep $PPID | grep sshd") and do the newgrp yourself.

The problem is that _smith_ in normal SSH sessions should be part of the
primary group _users_, and just in the special session should use primary
group _operator_ and in this cases _smith_ get no shell really.

It's something very similar to CVS with SSH.
I can say to CVS to use SSH  - but I got no shell.
(  CVSROOT=:ext:_smith_@myserver:/mycvs; CVS_RSH=ssh; )

Also in this case I can't change the primary group of _smith_ from _users_
to _operator_.

Can anyone give me a solution? (If there is a solution without changing the
source code to CVS I think that solution sould work also in my case)

>
> Hope this helps.  Have a nice day.
>
> -- Larry

Thanks a lot, for your time.

Jakab Laszlo


Reply via email to