[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#409738: marked as done (run nscd daemon as a non-privileged user)

Your message dated Wed, 25 Apr 2007 23:05:27 +0200
with message-id <20070425210527.GA3714@.madism.org>
and subject line Bug#409738: run nscd daemon as a non-privileged user
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
Package: nscd
Version: 2.3.6.ds1-10
Severity: wishlist


The nscd daemon has support to run as a non-privileged (ie: non-root)
user account via the "server-user" configuration file option.  There is
no explantion why this is not the case in the README.Debian (there is no
README.Debian).  Could an install time option be presented to enable
this option and/or could a system account be created with the package
(much like other system daemon accounts: postfix, sshd, ntp, hal).

thank you (and thanks for the excellent work),
donfede


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15.2-xwing-1
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages nscd depends on:
ii  libc6                       2.3.6.ds1-10 GNU C Library: Shared libraries

nscd recommends no packages.

-- no debconf information

--- End Message ---
--- Begin Message --- 
On Sun, Feb 04, 2007 at 08:50:00PM -0500, Federico Grau wrote:
> Package: nscd
> Version: 2.3.6.ds1-10
> Severity: wishlist
> 
> 
> The nscd daemon has support to run as a non-privileged (ie: non-root)
> user account via the "server-user" configuration file option.  There is
> no explantion why this is not the case in the README.Debian (there is no
> README.Debian).  Could an install time option be presented to enable
> this option and/or could a system account be created with the package
> (much like other system daemon accounts: postfix, sshd, ntp, hal).

  There is a support, but it won't work for most of the NSS things (like
shadows files, or ldap servers that require you to connect from
privileged ports). As it's an unusual setup, we don't force it by
default.

  Though, it's really easy to set up for a user, as it's only a matter
of adding:

  server-user nobody

in nscd.conf.

  or adding a system user (useradd --system --gid nogroup <your-user>)
and using it in nscd.conf. I don't see the point of documenting
something that is (1) unusual (2) straightforward in a README.Debian.

Cheers,
-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org

Attachment: pgpwaBekFsHQa.pgp
Description: PGP signature


--- End Message ---
Reply to: