[SSSD] [PATCH] Make sss_userdel check for logged in users
Jakub Hrozek
jhrozek at redhat.com
Wed Apr 28 08:07:52 UTC 2010
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/28/2010 05:14 AM, David O'Brien wrote:
> I'm not much for reading patches, and while I've got the gist of this, I
> have a couple of questions:
> 1. What's ENOSYS?
In this context, it means not implemented.
> 2. From the man page:
> "-f,--force
> This option forces sss_userdel to remove the userĀ“s home directory and
> mail spool, even if they are not owned by the specified user."
> Who else would they be owned by, and how would that come about, and why?
A different UID. For example, consider this sequence:
1) sss_useradd foo (homedir and spool are created)
2) sss_userdel --no-remove foo (--no-remove can also be a system-wide
default)
3) sss_useradd foo (homedir and spool are not created, just a warning is
printed that they already exist)
4) sss_userdel --force foo (homedir and spool are removed even though
they belong to a different user)
> 3. "Kill users' processes before removing him" s/users'/user's/ :-)
Yup, manpage bug. Thanks for catching it.
> 4. So far I've been able to use sss_userdel -k on a logged in user and
> not see the expected warning message about the user being logged in.
> This is with multiple processes running or just logging in in a shell.
>
The warning message is printed when deleting a user who is logged in
/without/ the -k flag. The -k flag just kicks the user out of the
system, by terminating all processes run by him - including his login shell.
> Any further updates or examples the doc needs to be aware of for other
> clients, e.g., Solaris, Windows, Mac?
>
So far we don't port SSSD to these platforms, but when we do, just a
note that this flag is not supported outside Linux yet.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkvX7NgACgkQHsardTLnvCXIpgCeJ2rFs2kcazt7cjD2kapM3C9F
MlMAoOa8I4fgrhqE+tiE+TEZZf+eBoGD
=IqW3
-----END PGP SIGNATURE-----
More information about the sssd-devel
mailing list