2
0
mirror of https://github.com/xcat2/confluent.git synced 2024-12-25 12:41:39 +00:00
xCAT confluent - replacement of conserver and eventually xcatd
Go to file
Jarrod Johnson ce1cb952e8 Fix PAM authentication
It's tricky.  On Redhat platforms, we need the CAP_DAC_READ_SEARCH
capability.  Unfortunately this is one of the nicest capabilities to have.

For now add it to ambient set so that PAM can work on redhat platforms.
Mitigate this risk by safeguarding the license handling code, which
is the only known place that can read a file and send it to somewhere.

If we could drop the capability from effective set and add it back in when
needed, that would be nice, but that appears not to be possible.

Short of that, having a separate authentication process
running and dropping privilege would potentially work.
2020-02-11 14:09:22 -05:00
confluent_client Fix python3 problem with confetty 2020-01-31 08:53:42 -05:00
confluent_common Change rpm spec to build using python2 2019-09-23 11:11:16 -04:00
confluent_perl Add support for shell based plugins 2014-05-27 15:02:53 -04:00
confluent_server Fix PAM authentication 2020-02-11 14:09:22 -05:00
confluent_web Implement ability to prompt for nodeattrib options. 2018-09-04 09:38:01 -04:00
doc Remove single byte TLV concept from socket protocol. 2013-10-12 21:15:52 -04:00
misc Make /usr/bin/env python point to python2 2019-09-23 11:04:52 -04:00
.gitignore Add gitignore 2015-02-03 10:16:43 -05:00
API.txt Remove kwargs to provide forward compatibility, it doesn't seem to be workable in python 2013-09-09 15:42:00 -04:00
LICENSE Apply IBM 2014 copyright and Apache 2 license to project 2014-04-07 16:43:39 -04:00
SECURITY Add some notes about security related design 2014-04-21 16:01:14 -04:00
TODO Avoid trying to set title on incapable terminals 2014-10-06 16:51:56 -04:00