On 25/02/2010 17:00, John Fischer wrote:
> All,
>
> I am sponsoring this case for Matt Keenan of the installer team.
> The case directory contains this proposal. I have set the timer
> for next Thursday, March 4th, 2010.
>
> This project updates the Dwarf Caiman, New Solairs Install GUI
> (PSARC/2007/284), to remove the requirement of providing a root
> password. Given that the user / password has primary administrator
> role, this password is not needed. The Dwarf GUI interface remains
> Uncommitted.
I'm happy with the changes listed, but I don't feel the project is
complete. I would like the case to go slightly further and NOT assign
"Primary Administrator" to the default user. It should not be needed
and doing so causes problems.
The fact that the initial user is given the root role and will have the
"Console User" profile when logged in on the console should be
sufficient. That profile currently includes the following:
Suspend To RAM,Suspend To Disk,Brightness,
CPU Power Management,Network Autoconf,Network Wifi Info,
Desktop Removable Media User,
Desktop Print Management;
auths=solaris.system.shutdown
Those combined with the fact that programs such as the GUI packagemanger
(and others) are executed already via gksu means the user will be
prompted for a password (which is actually the root role's password but
due to this case it won't mater initially). This gives a very similar
behaviour to Ubuntu and to MacOS X.
The setting of the initial root password to match that of initial user
password is really a workaround for the fact that Solaris roles
currently require a role password rather than using the assuming users
password. That issue is covered by 6419553 (and possibly others I can't
currently find among the 250+ hits I got) - one of the main barriers to
changing that was NIS+ which has now been removed.
--
Darren J Moffat
