Add LANGUAGE property to LMI_Locale
by Alexander Lakhin
Hello,
It seems that LMI_Locale misses one important property - LANGUAGE.
The property can have value distinct from LC_* and LANG and it is
supported by systemd-localed/localectl.
Is it possible to add it to the LMI_Locale provider?
I would like to propose the attached patch for it or should I file the bug?
Best regards,
Alexander
8 years, 8 months
Polkit-based authorization in OpenLMI providers
by Jan Safranek
Hello,
I've been working on reusing polkit authorization for OpenLMI providers,
which use a DBus service (e.g. NetworkManager, PackageKit, realmd,
systemd, ...).
I've documented the architecture on our wiki [1] and I submitted review
in our review-board. I won't push the patches until we get to an
agreement that it's the way to go and also the implementation is secure
- please review carefully. There are *no* changes needed in our provider
code and/or in the DBus services we work with.
1: https://fedorahosted.org/openlmi/wiki/PolkitAuthorization
2: https://reviewboard-openlmi.rhcloud.com/users/jsafrane/
In short, the concept is similar to Cockpit's reauthorization [3], we
just don't play tricks with user passwords - we don't have one on CIM
provider level. Instead, we register a polkit agent, which bluntly
authenticates every request from polkit in its PAM session.
3: https://github.com/cockpit-project/cockpit/blob/master/doc/reauthorize.md
[Kudos to Cockpit guys, I used their code to implement polkit agent and
helper.]
Just a side note: right now, users with remote CIM access must be
members of 'pegasus' group, otherwise they cannot start a provider. Is
it good or bad? Should _any_ user be able to use CIM by default and let
polkit decide? It's trivial to fix, just set different file/directory
permissions in tog-pegasus.rpm. And there is /etc/Pegasus/access.conf,
which can control access properly if sysadmin wishes, so the question is
just about the default setting.
Jan
9 years, 1 month
ANNOUNCE: openlmi-scripts-0.4.0
by Michal Minář
Following the release of openlmi-tools is openlmi-scripts with a lot of
changes since their previous release 0.3.0:
* new locale scripts for OpenLMI Locale provider
* new realmd scripts for OpenLMI Realmd provider
* new selinux scripts for OpenLMI SELinux provider
* new system scripts gathering host's information with a help of
OpenLMI providers
And a lot of improvements and bugfixes to the others.
You can get them for current release of Fedora 21 from updates-testing
repository:
dnf --enable-repo=updates-testing install 'openlmi-scripts-*'
Or soon from epel-testing on RHEL7.
Enjoy!
Michal Minar
9 years, 3 months
openlmi.org slightly reorganized
by Tomáš Smetana
Hi,
since we have moved most of the documentation to docs.openlmi.org, I have
done some cleanup and re-linking of the content on openlmi.org.
If there are some dead or obsolete links or other problems, please let me
know.
Regards,
--
Tomáš Smetana
Platform Engineering, Red Hat
9 years, 3 months
ANNOUNCE: lmiwbem-0.5.0
by Peter Hatina
Hi all,
there is a new version of lmiwbem available at [1].
What's new?
- pull operations
- fixed CIMIndicationListener port value, when multiple bind retries are
allowed
- fixed multithreading races
- verbose exceptions (more informative exception message)
- CIMError, ConnectionError can include intrinsic call names
and their parameters
- configurable via lmiwbem.EXCEPTION_VERBOSITY
- CIMIndicationListener.add_handler() can take tuple of handlers
- doc: switched to rtd theme
- various fixes and improvements
[1]
https://github.com/phatina/lmiwbem/releases/download/lmiwbem-0.5.0/lmiwbe...
--
Peter Hatina
ENG Server Experience, System Management
PGP: F32822A9
Red Hat, Inc. http://cz.redhat.com
9 years, 3 months