Re: [vserver] vcontext and ldap

From: Daniel Hokka Zakrisson <daniel_at_hozac.com>
Date: Sun 29 Mar 2009 - 20:49:43 BST
Message-ID: <39438.2001:16d8:ff15:101:219:d2ff:fed5:8193.1238356183.squirrel@intranet>

John A. Sullivan III wrote:
> Hello, all. We're finally starting to see some progress on our
> VServer / X2Go integration. In anticipating of needing to create
> hundreds if not thousands of desktops, we rely quite heavily on
> scripting to automatically set up the VServer guests, the virtual
> desktops, the DNS entries, LDAP entries, etc.
>
> One of the tasks we must do is to run xdg-user-dirs-update as the
> unprivileged user in the new vserver guest. We attempted to do this
> with "vserver <guestname> suexec <username> xdg-user-dirs-update". It
> works perfectly if the user is locally defined. However, if the user is
> only defined in LDAP, we get vcontext: Username '<username>' does not
> exist. The VServer host does have LDAP access.

suexec is very, very basic. It cannot do things like LDAP resolve for
security reasons. If that's what you require, use vserver ... exec runuser
...

-- 
Daniel Hokka Zakrisson
Received on Sun Mar 29 20:50:11 2009
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 29 Mar 2009 - 20:50:13 BST by hypermail 2.1.8