Re: [gentoo-server] Virtual ssh users

["Paul Kölle" <pkoelle@gmail.com>]

Yogesh Sharma wrote:
> On 07:43 A. Khattri wrote:
> 
>>Incidently, you can use libnss-mysql to avoid having to create an
>>actual
>>system account if you need "true" virtual users.
> 
> 
> 
> Any link to documentation or example for implementing libnss-mysql based
> virtual users ?
> Database schema, user name, config file etc.
> 
It's pretty straightforward. libnss-mysql configuration file takes a SQL
query for each get*() call, so there are no constraints for the db
schema. Examples are in /usr/share/doc after installing the package.
What I haven't figured out yet: Calls to NSS are made in the context of
the user running e.g. "id", so if you use a socket connection to mysql
you need to allow *every* user to read from the socket. I haven't
investigated the implications in terms of security yet.

cheers
 Paul
-- 
gentoo-server@gentoo.org mailing list