Re: [Debian-sf-users] Apt-get upgrade

[Christian BAYLE]

Tim Uckun wrote:

> > Ldap is useful for login shells. It essentially enable creation of 
> > login account without touching /etc/passwd and /etc/group
> > It also allow to manage unix right on file access for CVS.
> > You can not to use ldap desctivating then in local.inc, web part 
> > should work, but not FRS, FTP, SHELLS, CVS :(, though it's
> > probably possible to have this working without ldap.
> > Do SF3 also use Oracle as a Database?
>
>
> SF3 does use oracle as a default but it can also work with postgres. 
> They claim you get more features with oracle.
>
> Maybe I could disable ldap. I don't use FTP or SHells or anything. I 
> do make heavy use of CVS but I don't like the way SF creates a new 
> CVSROOT for each project so I always create a project called 
> coderepository and put all the code under one CVSROOT. I guess you 
> still need ldap for :ext: cvsroots though.
If you chroot you can easier not use ldap since you can more safelly 
fill the chrooted passwd and group files
This is  done like this in sf 2.5 for anonymous cvs, if i remember well 
in new_parse.pl.
Just create a script that fill correctly a passwd and group file in the 
chrooted part.
The difficulty is to have things like mail working in this chrooted 
part, you will probably need to
enhance install-chroot for this.
You have of course to chroot your ssh.
It should be possible to package this as an alternate solution, but i 
think there is some difficult work to
manage dependancies correctly.

A+

Christian

> :wq
> Tim Uckun
> US Investigations Services/Due Diligence
>  http://www.diligence.com/
>
>
> _______________________________________________
> Debian-sf-users mailing list
> address@hidden
> http://mail.freesoftware.fsf.org/mailman/listinfo/debian-sf-users