Mailing List Archive

ACL?
hello!

would like to know if I am able to set up different unix-users to be able to
access different server ports with conserver?

/jonas



Jonas Blåberg
jonas.blaberg@cellnetwork.com
+46-(0)709-95 00 68
Re: ACL? [ In reply to ]
On Fri, May 18, 2001 at 11:42:58AM +0200, Jonas Blåberg wrote:
> hello!
>
> would like to know if I am able to set up different unix-users to be able to
> access different server ports with conserver?

It's not pretty, but yes. In the conserver.passwd file you "normally"
have something like:

user1:*passwd*:any
user2:*passwd*:any
...

Instead of the word 'any', you can put a list of consoles they're
allowed to access.

user1:*passwd*:console1,console2,console4
user2:*passwd*:any
user3:*passwd*:console3

So, user3 can only access console3, user1 can only access
console{1,2,4}, and user2 can access any of them.

Hope that answered your question. Ideally, one day, we'd be able to
define console groups and assign those to users and such, but that's
off in the future. Oh, and there is a fairly small limit (~100) as to
the number of characters that list of consoles can be. If you need
more, up the buf[] declaration in CheckPasswd() in conserver/group.c.
Ugly, I know...if someone else doesn't do it, I'll fix it eventually.

Bryan
SV: ACL? [ In reply to ]
okey, that solves lot of my problems.

Is the format of conserver.passwd documented anywhere? I did not find
anything about it...

/jonas



-----Ursprungligt meddelande-----
Från: Bryan Stansell [mailto:bryan@conserver.com]
Skickat: den 18 maj 2001 23:14
Till: users@conserver.com
Ämne: Re: ACL?


On Fri, May 18, 2001 at 11:42:58AM +0200, Jonas Blåberg wrote:
> hello!
>
> would like to know if I am able to set up different unix-users to be able
to
> access different server ports with conserver?

It's not pretty, but yes. In the conserver.passwd file you "normally"
have something like:

user1:*passwd*:any
user2:*passwd*:any
...

Instead of the word 'any', you can put a list of consoles they're
allowed to access.

user1:*passwd*:console1,console2,console4
user2:*passwd*:any
user3:*passwd*:console3

So, user3 can only access console3, user1 can only access
console{1,2,4}, and user2 can access any of them.

Hope that answered your question. Ideally, one day, we'd be able to
define console groups and assign those to users and such, but that's
off in the future. Oh, and there is a fairly small limit (~100) as to
the number of characters that list of consoles can be. If you need
more, up the buf[] declaration in CheckPasswd() in conserver/group.c.
Ugly, I know...if someone else doesn't do it, I'll fix it eventually.

Bryan
_______________________________________________
users mailing list
users@conserver.com
https://www.conserver.com/mailman/listinfo/users
Re: SV: ACL? [ In reply to ]
On Mon, May 21, 2001 at 08:30:29AM +0200, Jonas Blåberg wrote:
> okey, that solves lot of my problems.

Cool.

> Is the format of conserver.passwd documented anywhere? I did not find
> anything about it...

Not very well. There's a small blurb in conserver.cf/INSTALL, but
that's about it. Documentation, in general, needs more help.

Bryan