2
0
mirror of https://github.com/xcat2/confluent.git synced 2024-11-22 09:32:21 +00:00
confluent/confluent_server
Jarrod Johnson ce1cb952e8 Fix PAM authentication
It's tricky.  On Redhat platforms, we need the CAP_DAC_READ_SEARCH
capability.  Unfortunately this is one of the nicest capabilities to have.

For now add it to ambient set so that PAM can work on redhat platforms.
Mitigate this risk by safeguarding the license handling code, which
is the only known place that can read a file and send it to somewhere.

If we could drop the capability from effective set and add it back in when
needed, that would be nice, but that appears not to be possible.

Short of that, having a separate authentication process
running and dropping privilege would potentially work.
2020-02-11 14:09:22 -05:00
..
bin Fix mistake in the cert util 2020-02-03 15:37:20 -05:00
confluent Fix PAM authentication 2020-02-11 14:09:22 -05:00
dbgtools Make /usr/bin/env python point to python2 2019-09-23 11:04:52 -04:00
sysctl Tune the UDP receive buffer 2017-08-11 15:43:44 -04:00
systemd Fix PAM authentication 2020-02-11 14:09:22 -05:00
sysvinit Fix sysvinit 2019-08-20 08:59:01 -04:00
builddeb Use python3 for Debian and Ubuntu except for wheezy 2020-01-14 09:52:16 -05:00
buildrpm Use python3 explicitly for building source 2019-10-16 13:26:15 -04:00
confluent_server.spec.tmpl Have systemd manage confluent run dir 2020-02-06 13:45:46 -05:00
confluentdbgcli.py Make /usr/bin/env python point to python2 2019-09-23 11:04:52 -04:00
confluentsrv.spec Revert 'confluentd' change 2015-09-23 11:48:27 -04:00
makesetup Fix makesetup for confluent_client 2018-04-10 16:11:14 -04:00
MANIFEST.in Add confluent pam to packaging 2018-11-14 14:55:26 -05:00
requirements.txt Packaging fixup in preparation for 1.1 release cycle 2015-03-25 13:52:59 -04:00
setup.py.tmpl Fix packaging omission of console plugins 2019-11-20 10:04:38 -05:00