Hi. Now all child processes are executed by the same user as afrender runs.
When afrender and afserver starts from init.d they reads a file:
/opt/cgru/afanasy/nonrootuser
and "su" to it (if they are root).
If there is no such file, they create it with a "render" text.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Anonymous
-
2012-02-24
Do you mean that only one nonrootuser can be "su", or every submitter can be "su" ?
So the only chance to decide the permission about somebody is at the afserver starting point ?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Yes. Now all tasks of jobs sent by any user will be executed by the same user that afrender was started with.
And as i understand, you wan afrender to be able to switch to some another user to execute tasks?
For example execute username "john" tasks by user "john", "peter" su to "peter" and not "render".
It not so hard implement such feature. Are you going to run "afrender" main process under the root?
And what platform are you using? Some Linux OS?
You even can run tasks through some wrapper that will perform su to specified user.
( see AF_CMD_PREFIX environment variable - all commands will be prefixed with it on job generation stage (were we know who do it) )
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Anonymous
-
2012-02-25
Thanks for your suggestion !
Althought we run afrender under Windows now.
We'll try it in the next project.
Thank you !!!
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Can process change uid by job submitter ?
Or only execute command by ID named "render" ?
Hi. Now all child processes are executed by the same user as afrender runs.
When afrender and afserver starts from init.d they reads a file:
/opt/cgru/afanasy/nonrootuser
and "su" to it (if they are root).
If there is no such file, they create it with a "render" text.
Do you mean that only one nonrootuser can be "su", or every submitter can be "su" ?
So the only chance to decide the permission about somebody is at the afserver starting point ?
Yes. Now all tasks of jobs sent by any user will be executed by the same user that afrender was started with.
And as i understand, you wan afrender to be able to switch to some another user to execute tasks?
For example execute username "john" tasks by user "john", "peter" su to "peter" and not "render".
It not so hard implement such feature. Are you going to run "afrender" main process under the root?
And what platform are you using? Some Linux OS?
You even can run tasks through some wrapper that will perform su to specified user.
( see AF_CMD_PREFIX environment variable - all commands will be prefixed with it on job generation stage (were we know who do it) )
Thanks for your suggestion !
Althought we run afrender under Windows now.
We'll try it in the next project.
Thank you !!!