Add option to shibd to set uid and gid at startup

Description

Getting the Macport to handle non-root startup will be much cleaner if we can set the user to run shibd with on the command line.

Environment

None

Attachments

1

Activity

Show:

Scott Cantor February 11, 2012 at 3:06 AM

Closing with documentation written.

Former user September 5, 2011 at 5:59 PM

All I can add is that on a POSIX compliant system, getpwnam() and getgrnam() are absolutely standard (the threadsafe *_r variants are a different thing [they're optional], but non-reentrant versions should be fine for shibd's main(), I assume).

Scott Cantor September 5, 2011 at 5:08 PM

It will depend on whether I see any portability issues. And my impression is this isn't the kind of thing that's very portable.

Former user September 5, 2011 at 11:22 AM

Sorry for bothering again... but I just realized that with the current patch, -u and -g are supposed to specify numeric UIDs/GIDs. I think that's of somewhat limited usefulness.

Would you mind applying something like the attached patch, so that "-u shibd" etc. can be used on the command line?

(I just added the additional headers within the HAVE_UNISTD_H block, maybe some more AC_CHECK_HEADER foo in configure.ac would be the cleaner approach.)

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Original estimate

Components

Fix versions

Created August 30, 2011 at 4:39 PM
Updated February 11, 2012 at 3:06 AM
Resolved August 30, 2011 at 6:39 PM