Indication subscription for pegasus user

Devchandra L Meetei dlmeetei at gmail.com
Tue Jan 7 12:15:44 UTC 2014


On Tue, Jan 7, 2014 at 5:16 PM, Jan Safranek <jsafrane at redhat.com> wrote:

> On 01/03/2014 01:30 PM, Radek Novacek wrote:
> > I've noticed that we suggest our users that they should use the
> 'pegasus' user
> > for connection to pegasus, for example in the Quick Start Guide [1].
> >
> > But the default pegasus configuration forbids non-privileged users to
> create
> > indication subscriptions. This affects the 'pegasus' user. When someone
> > connects to the pegasus using 'pegasus' user, he can't create any
> > subscription, unless it's explicitly allowed in the pegasus
> configuration:
> >
> > (from man cimconfig):
> >
> > enableSubscriptionsForNonprivilegedUsers
> >
> >               Description: If True, nonprivileged user of the system
> will be
> > allowed to create Indication Subscription, otherwise privileged access is
> > required.
> >               Default Value: False
> >               Dynamic: No
> >
> >
> > I think that this behavior is very confusing for our users, we should do
> one
> > of the following options:
> >
> > 1) stick with current way - user must change that option in order to
> create
> > subscription as 'pegasus' (or other non-root) user and document it,
> >
> > 2) allow 'pegasus' user to create indication subscriptions by default
> (don't
> > know if pegasus supports some kind of whitelisting of users),
> >
> > 3) mark 'pegasus' user as privileged (not sure if possible),
>
> Looking into sources, Pegasus checks for uid == 0, all other users are
> 'unprivileged'.
>
starting from pegasus 2.11.2 and 2.12 onwards, privileged users are users
with gid == 0 or uid == 0
Details at [1] and [2]
Seems that you are using 2.11.0 or 2.11.1 or earlier versions of pegasus


[1] http://bugzilla.openpegasus.org/show_bug.cgi?id=9319
[2] http://bugzilla.openpegasus.org/show_bug.cgi?id=9334


>
>
>
>
>
> Jan
> _______________________________________________
> openlmi-devel mailing list
> openlmi-devel at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/openlmi-devel
>



-- 
Warm Regards
--Dev
OpenPegasus Developer/Committer

"Any fool can write code that a computer can understand. Good programmers
write code that humans can understand."
--- Martin Fowler
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/openlmi-devel/attachments/20140107/84327d3a/attachment.html>


More information about the openlmi-devel mailing list