Bug 1995

Summary: RFE: Implement "localproject" Serverinterpreted Authentification
Product: xorg Reporter: Roland Mainz <roland.mainz>
Component: Server/GeneralAssignee: Xorg Project Team <xorg-team>
Status: RESOLVED WONTFIX QA Contact:
Severity: enhancement    
Priority: high CC: alan.coopersmith, casper.dik, roland.mainz
Version: git   
Hardware: All   
OS: Solaris   
Whiteboard:
i915 platform: i915 features:

Description Roland Mainz 2004-12-02 14:15:04 UTC
RFE: Implement "localproject" Serverinterpreted Authentification.
Solaris has a 3rd credetial item (=additionally to the normal "user" and "group"
cred) called "project" (see project(4) manual page).

It would be nice if a user can grant other users in a project access to the
display, e.g. "xhost +si:localproject:taxpayers" should grant all users which
are in the group "taxpayers" access to the display.
Comment 1 Alan Coopersmith 2004-12-02 14:23:54 UTC
We discussed this at Sun when I wrote localuser & localgroup.   localproject would
be a trivial addition, but projects are normally intended for resource allocation
and accounting, not for authentication purposes, so it seems a bit strange.
Comment 2 Roland Mainz 2004-12-02 14:33:18 UTC
Alan Coopersmith wrote:
> We discussed this at Sun when I wrote localuser & localgroup.   localproject 
> would be a trivial addition, but projects are normally intended for resource 
> allocation and accounting, not for authentication purposes, so it seems a bit 
> strange.

It sounds strage but may be usefull (same applies to the detail that "groups"
can have passwords (a detail which isn't widely known these days... ;-( )) -
remember that "groups" are a very rare resource in some environments because one
user can only be in 16 groups at the same time (otherwise you have trouble with
NFSv3 with Unix auth. - and even if you bypass that you'll sooner or later hit
the Solaris kernel hard limit of 32 groups per user) and running to the admin
and requesting there an extra group id just for shared Xserver access isn't
always easy... ;-/
Comment 3 Roland Mainz 2004-12-02 14:35:16 UTC
1. s/should grant all users which are in the group "taxpayers"/should grant all
users which are in the project "taxpayers"/
2. s/strage/strange/
3. More coffee :)
Comment 4 Adam Jackson 2006-04-04 22:17:49 UTC
sounds like a rather unlikely feature and/or a solarisism.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.