rpms/tinyerp/FC-3 tinyerp.spec,1.7,1.8

[Enrico Scholz]

rc040203 at freenet.de (Ralf Corsepius) writes:

>> > 3. Why fedora-useradd?
>
> Did somebody analyze if tinyerp needs fedora-usrmgt at all?

I think it needs it (it has a persistent /var/spool directory).
fedora-usermgmt is very lightweighted and does not cost very much
(e.g. no perl dep) so it is not a problem.


> Most well designed server (!) software doesn't need fixed uid's nor
> any network-wide shared uids.

??? Much servers are using UNIX sockets and UIDs/GIDs are a very effective
method to make them sure. When two servers (e.g. in chroots) are sharing
the same socket I want that they have the same view about ownership.

Else, I suggest to read

 http://fedoraproject.org/wiki/PackageDynamicUserCreationConsideredBad


>> > * Use literal account name instead of numerical ones and  a plain
>> >   user-add probably will be sufficient.
>> > * IMO, fedora-usermgt is a design wart that should not be used anywhere.
>> 
>> ??? I create all my service users in this way and I am not aware of a a
>> better way to create service-users with the same UID on every host.
> Read what you wrote: "... ALL MY ... USERS ..." 
>
> It only works because you are using fedora-usrmgt everywhere, comprising
> non-fedora machines in your network.

And? Every thing has a beginning. It is difficultly to persuade Fedora
people, and I had no time yet to start with non-fedora ones ;)


> It won't work:
> - If you don't have control over ALL machines (E.g. because a work-group
> in your network doesn't grant you admin-rights on a subset of
> machines).

When I do not have admin-rights there, why should I try to add new
users?


> - if another similar tool is installed on machines in your network (say
> a "suse-usrmgt" or "sun-usrmgt" on SuSE or Suns in your network.)

fedora-usermgmt is not very fedora specific; it works probably out-of-the
box on SuSE machines, the SUN version will perhaps need removal of some
bash'isms.


> I.e. fedora-usrmgt's has an infective nature - To me, this is a
> fundamental design flaw, which questions it as a whole.

Please not this infective ... crap. When you do not want it, then do not
use GPLed software.




Enrico
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 480 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-extras-list/attachments/20051214/4c8693ad/attachment.sig>