Hi
Seeking feedback from anyone who is knowledgable about Shadow Group Support.
Is it actually used much in the wild?
How useful really is it?
Should the shadow pkg have it switched on by default?
The reason I ask - the latest shadow-4.0.11.1 has revamped the autoconfigury
to allow `--{dis,en}able-shadowgrp'. Unfortunately, while the `--help'
output says it defaults to "yes" it actually defaults to "no". So if you
want Shadow Group support enabled, you must pass `--enable-shadowgrp' to
configure.
Earlier versions just had it enabled by default with no way to change it.
The upshot - if you build shadow-4.0.11.1 using current instructions then
`grpconv' will not work. LFS instructs the reader to optionally run this
program so.. something clearly needs to be done. For now, I'm just passing
`--enable-shadowgrp' to preserve the old behavior.
Here is the blurb from the shadow docs about the feature. The 3rd para would
appear to be outdated:
Shadow Group Files -
This option utilizes an alternate, non-readable file to
contain encrypted group passwords and group administrator
information.
This feature allows one or more users to be defined as
the administrators of a group for the purpose of adding
or deleting members and changing the group password.
Select this option by defining the SHADOWGRP macro. You
must also create an emptry /etc/gshadow file. You must
select the SHADOWPWD option if you select SHADOWGRP.
Thanks for any insights.
Regards
Greg
--
http://www.diy-linux.org/
--
http://linuxfromscratch.org/mailman/listinfo/lfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
