|
From: Alex P. <pe...@in...> - 2003-06-11 12:39:26
|
Hello, Helen! I've commited changes to instsvc, which allow firebird service to login with non-LocalSystem account. Unfortunately, this mode is not compatible with local access to firebird server - our local protocol relies on SERVICE_INTERACTIVE_PROCESS mode (i.e. Allow service to interact with desktop). But for people, who need more security on the site, this doesn't appear important. Concerning documentations. I don't have ANY documentation about instsvc command line utility. So I write it in free-form, hoping you will fix my style. Switch [-Login username [password]] enables to change service login from LocalSystem to real user login. Instsvc detects, wheather password given or not, checking for '-' (minus sign) in the argument after username. Therefore, password should not begin with '-'. User username should be allowed to login as service and, certainly, must have read/write access to all databases and firebird.log file. For security reasons, write access to firebird executables and (specially) firebird.conf should NOT be given. Use of -l switch disables use of local protocol, so you must choose between increased secutiry and ability to use local access to databases. For production servers, which need to run in potentially agressive environment, it's strongly recommended to use -l switch. Alex. ----- Original Message ----- From: "Helen Borrie" <he...@tp...> To: <fir...@li...> Sent: Tuesday, June 10, 2003 7:15 PM Subject: Re: [Firebird-devel] RC3 Win32 install kits > At 06:59 PM 10/06/2003 +0400, Alex Peshkov wrote: > >Modification required - 20-30 lines of code. I'd like to hear admins mind - > >add it to 1.5 or not? > > My view, add it and GIVE ME DOCUMENTATION FOR IT. Please. > > Helen > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Etnus, makers of TotalView, The best > thread debugger on the planet. Designed with thread debugging features > you've never dreamed of, try TotalView 6 free at www.etnus.com. > Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel > |