Bug 1995 - RFE: Implement "localproject" Serverinterpreted Authentification
Summary: RFE: Implement "localproject" Serverinterpreted Authentification
Status: RESOLVED WONTFIX
Alias: None
Product: xorg
Classification: Unclassified
Component: Server/General (show other bugs)
Version: git
Hardware: All Solaris
: high enhancement
Assignee: Xorg Project Team
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-12-02 14:15 UTC by Roland Mainz
Modified: 2006-04-04 05:17 UTC (History)
3 users (show)

See Also:
i915 platform:
i915 features:


Attachments

Description Roland Mainz 2004-12-02 14:15:04 UTC
RFE: Implement "localproject" Serverinterpreted Authentification.
Solaris has a 3rd credetial item (=additionally to the normal "user" and "group"
cred) called "project" (see project(4) manual page).

It would be nice if a user can grant other users in a project access to the
display, e.g. "xhost +si:localproject:taxpayers" should grant all users which
are in the group "taxpayers" access to the display.
Comment 1 Alan Coopersmith 2004-12-02 14:23:54 UTC
We discussed this at Sun when I wrote localuser & localgroup.   localproject would
be a trivial addition, but projects are normally intended for resource allocation
and accounting, not for authentication purposes, so it seems a bit strange.
Comment 2 Roland Mainz 2004-12-02 14:33:18 UTC
Alan Coopersmith wrote:
> We discussed this at Sun when I wrote localuser & localgroup.   localproject 
> would be a trivial addition, but projects are normally intended for resource 
> allocation and accounting, not for authentication purposes, so it seems a bit 
> strange.

It sounds strage but may be usefull (same applies to the detail that "groups"
can have passwords (a detail which isn't widely known these days... ;-( )) -
remember that "groups" are a very rare resource in some environments because one
user can only be in 16 groups at the same time (otherwise you have trouble with
NFSv3 with Unix auth. - and even if you bypass that you'll sooner or later hit
the Solaris kernel hard limit of 32 groups per user) and running to the admin
and requesting there an extra group id just for shared Xserver access isn't
always easy... ;-/
Comment 3 Roland Mainz 2004-12-02 14:35:16 UTC
1. s/should grant all users which are in the group "taxpayers"/should grant all
users which are in the project "taxpayers"/
2. s/strage/strange/
3. More coffee :)
Comment 4 Adam Jackson 2006-04-04 22:17:49 UTC
sounds like a rather unlikely feature and/or a solarisism.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.