Hi Angus, all,
Pacemaker has completely converted to use libqb based IPC. Since pacemaker supports ACLs for CIB, the cib daemon needs to know UIDs of clients. We'll need to fix this part.
I gave a glance at libqb. The uid/gid appear in qb_ipcs_connection_accept_fn() for authentication. Though it seems we should add them into qb_ipcs_connection_stats_*, so that we could get the info in other handlers. For example in qb_ipcs_connection_created_fn(), we could get the info with qb_ipcs_connection_stats_get_*() and record that through qb_ipcs_context_set() for further use.
Does this make sense? Any suggestions would be much appreciated?
Regards, Gao,Yan -- Gao,Yan ygao@suse.com Software Engineer China Server Team, SUSE.
On 07/06/12 19:39 +0800, Gao,Yan wrote:
Hi Angus, all,
Pacemaker has completely converted to use libqb based IPC. Since pacemaker supports ACLs for CIB, the cib daemon needs to know UIDs of clients. We'll need to fix this part.
I gave a glance at libqb. The uid/gid appear in qb_ipcs_connection_accept_fn() for authentication. Though it seems we
So why not just store the info using qb_ipcs_context_set() within the qb_ipcs_connection_accept_fn callback?
-Angus
should add them into qb_ipcs_connection_stats_*, so that we could get the info in other handlers. For example in qb_ipcs_connection_created_fn(), we could get the info with qb_ipcs_connection_stats_get_*() and record that through qb_ipcs_context_set() for further use.
Does this make sense? Any suggestions would be much appreciated?
Regards, Gao,Yan -- Gao,Yan ygao@suse.com Software Engineer China Server Team, SUSE. _______________________________________________ quarterback-devel mailing list quarterback-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/quarterback-devel
On 06/07/12 19:51, Angus Salkeld wrote:
On 07/06/12 19:39 +0800, Gao,Yan wrote:
Hi Angus, all,
Pacemaker has completely converted to use libqb based IPC. Since pacemaker supports ACLs for CIB, the cib daemon needs to know UIDs of clients. We'll need to fix this part.
I gave a glance at libqb. The uid/gid appear in qb_ipcs_connection_accept_fn() for authentication. Though it seems we
So why not just store the info using qb_ipcs_context_set() within the qb_ipcs_connection_accept_fn callback?
Ah, right. Thanks a lot for the suggestion!
Regards, Gao,Yan
quarterback-devel@lists.fedorahosted.org