#4597 closed Enhancement (invalid)
Patch to add RPC authentication support over PAM
Reported by: | andrew.sichevoi | Owned by: | |
---|---|---|---|
Priority: | Normal | Milestone: | None Set |
Component: | Transmission | Version: | 2.42 |
Severity: | Normal | Keywords: | daemon, authentication, pam |
Cc: |
Description
Hello there,
I have added RPC authentication support for transmission daemon over PAM (Pluggable Authentication Modules subsystem). Please consider adding the implemented feature to the trunk/. So user can connect to its transmission-daemon instance using his/her system credentials.
Patch brief: added native user authentication for transmission-daemon. Currently Linux only.
Version to apply: trunk@13057
Notes:
- The main reason for me for this feature was an ability to maintain easily access for running transmission daemon.
- PAM authentication is enabled through rpc-native-authentication-enabled cfg keyword. It was called 'native-authentication' since for other OS`s the ways to authenticate user differ from PAM.
- To make PAM authentication work correctly, transmission-daemon instance must be added to 'shadow' group to be able read '/etc/shadow' file if authentication is made over pam_unix.so
Benefits:
- Easy maintain user access to transmission-daemon
- Transparent authentication: thanks to PAM configurability authentication can be performed even via LDAP (as example).
Attachments (2)
Change History (4)
Changed 11 years ago by andrew.sichevoi
Changed 11 years ago by andrew.sichevoi
comment:1 Changed 11 years ago by jordan
- Resolution set to invalid
- Status changed from new to closed
Thanks very much for the patches; they look good.
However, this is not a feature that anyone else has ever asked for. I'm hesitant to add more code -- even free, good code -- for a feature that doesn't appear to have many potential users.
comment:2 Changed 11 years ago by Elbandi
jordan: could you make a wiki page to collect this patches? It would be good, if someone need a feature - but you dont want to include to T -, they can easy search them.
Patches to add native RPC authentication support file-by-file