[Zope] etcUserFolder

Stuart 'Zen' Bishop zen@cs.rmit.edu.au
Mon, 20 Mar 2000 21:21:01 +1100 (EST)


On Mon, 20 Mar 2000, mindlace wrote:

> mindlace wrote:
> > 
> > mindlace wrote:
> > > I'm trying to use etcUserFolder...
> > 
> > And I can't get it to work at all. 
> 
> I etcUserFolder works for me now, but my prior question (how can I get
> it to use /etc/shadow?) still stands.

You can't, unless Zope runs as root (which would be a very bad thing).
This is by design.

The best you can do is:
    1) Setup Zope to run as its own user (eg. user 'zope') instead of
       user 'nobody'
    2) Add a crontab job to copy the /etc/shadow file to where Zope
       can see it, changing ownership to user zope and removing group
       and other permissions.

If you run Zope as the nobody user, then the encrypted passwords will
need to be visible to this user, as well as any other processes that
run as user nobody which is not a good thing.

-- 
 ___
   //     Zen (alias Stuart Bishop)     Work: zen@cs.rmit.edu.au
  // E N  Senior Systems Alchemist      Play: zen@shangri-la.dropbear.id.au
 //__     Computer Science, RMIT 	 WWW: http://www.cs.rmit.edu.au/~zen