[request-sponsor] Interested in working in Enhancement 6605578

2007-09-20 Thread Sergio Gutierrez
Hello everybody.

I apologize for sending again this request; I was suggested to re-send it to
indicate my SCA Number.

I am interested in working in the enhancement 6605578 (pkill(1) and pgrep(1)
should print an explicit message indicating the case when no matching
processes be found)

My SCA number is: OS0133


Thanks in advance for your attention.

Sergio Guti?rrez.
-- next part --
An HTML attachment was scrubbed...
URL: 
<http://mail.opensolaris.org/pipermail/request-sponsor/attachments/20070920/25cce1df/attachment.html>


[request-sponsor] Requesting sponsor for CR #6605094: netgroups

2007-09-20 Thread Peter W. Osel
Darren J Moffat wrote:
> Given that OpenSolaris has a pam_list module that supports netgroups
> do we even need this ?

It seems that pam_list does actually cover all the usual restrictions we 
currently use in our environment.  The proposed change for Allow/Deny Users 
supports the more flexible phrase @user@@host (I know the syntax is ugly), 
where you could allow/deny groups of users if they access the host from a group 
of remote systems.  I don't have a good example where this construct would be 
crucial, though, so I cannot make too strong of an argument.  In pam_list's 
case you would have to construct a special netgroup consiting of the vector 
product of the netgroup @user and the netgroup @host, if I understand it 
correctly?

With @user@@hosts you could e.g. configure that admins can only login from 
admin systems.

I still would like to implement the proposed change, even though with pam_list 
will cover most (all of the usual) cases.

Cheers
--pwo

P.S.:  pam list is a welcome addition to Solaris's PAM stack,  thank you!

--
Peter W. Osel -- http://pwo.de/ -- pwo at pwo.de
 
 
This message posted from opensolaris.org



[request-sponsor] Interested in working on Enhancement 6306504

2007-09-20 Thread Darren J Moffat
Sergio Gutierrez wrote:
> 
> Hello everybody.
> 
> I am not sure if enhancement 6306504 (Command for locking a TTY session) 
> is free to be worked on, or it is been done by somebody else.
> 
> In case it be free, I would like to work on it.

Contact Rich Teer about this, he was planning to do this and I have 
already sponsored and gotten approved the ARC case for the design.

Rich hasn't given me code to integrate as yet.

Also please check in with the virtual consoles project as they are 
implementing vtty locking in that project.

-- 
Darren J Moffat