Re: Did cockpit spawn superuser parameters change?
On 1/19/23 8:49 AM, Martin Pitt wrote:
Hello Mark,
Mark Reynolds [2023-01-18 16:31 -0500]:
> So we've been using "superuser=true" for a long time now, and we have
a
> customer issue where system users who have sudo rights don't seem to have
> privileges in Cockpit. Looking at the docs it does not mention "true"
> anymore, but "require", "try", etc.
>
> So did the "true" value go away? Does it have any effect anymore, or
should
> we switch it over to "require"?
"require" or "try" are the officially documented values, but a
boolean true
still works as well as an alias for "require", and that hasn't changed in
a
long time (and we are not planning to):
https://github.com/cockpit-project/cockpit/blob/main/src/bridge/cockpitro...
Do you have some more information about the problem?
OS/release/screenshots/reproducer, etc.?
Working on that... This is an IDM/Freeipa case where AD users are
synced over and put into some type of "sudo" group on the system. These
users are able to get into Cockpit but when they run our plugin it
doesn't work. Our plugin runs CLI commands that must be run as
root/privileged user, and these commands appear to be failing. I'm
waiting for more info from the support team to confirm all of this.
I'll keep you posted once I have more info as I still might need some help.
Thanks,
Mark
Thanks,
Martin
_______________________________________________
cockpit-devel mailing list -- cockpit-devel(a)lists.fedorahosted.org
To unsubscribe send an email to cockpit-devel-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/cockpit-devel@lists.fedoraho...
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
--
Directory Server Development Team