And maybe change /bin/bash to /sbin/nologin for this sort of users? Do
rgma, edginfo, edguser, glite &co need login access?
cheers
alessandra
Steve Traylen wrote:
> On Wed, Apr 29, 2009 at 7:17 AM, Adrian Sevcenco
> <[log in to unmask]> wrote:
>
>> Steve Traylen wrote:
>>
>>> On Wed, Apr 29, 2009 at 12:29 AM, Adrian Sevcenco
>>> <[log in to unmask]> wrote:
>>>
>>>> Hi,
>>>> Has anyone any idea why there are the hostcert and hostkey in
>>>> /home/glite/.certs ?
>>>> One question that would arise would be about security (an normal user
>>>> that has a shell and keeps the certificate of the machine ...)
>>>>
>>> Hi Adrian,
>>>
>> Hi,
>>
>>
>>> Who is "glite". Do they run a service or something. Which node type is this.
>>>
>> sorry for not being more clear ..
>> The node type is : CE+MON+BDII_site+UI
>> the glite is running glite-lb-interlogd with the command
>> /opt/glite/bin/glite-lb-interlogd -c /home/glite/.certs/hostcert.pem -k
>> /home/glite/.certs/hostkey.pem
>>
>> and i have no idea what is glite-lb-interlogd ..
>>
>
> The only item to be fixed here is just to change the default the home
> directory to something more local, something like /var/lib/glite.
>
> Can you submit a bug request please.
>
> Steve
>
>
>
>> Thanks,
>> Adrian
>>
>>
>>
>
>
>
>
--
Alessandra Forti - NorthGrid Technical Coordinator
http://www.hep.manchester.ac.uk/computing/tier2
Well you'll still need a tray. (Eddie Izzard)
|