Commit 4b97bb7f authored by Leigh Stoller's avatar Leigh Stoller

Add ISOLATEADMINS, default to true. This variable splits Emulab admins

and non-admins in projects that have users in both categories (mostly
emulab-ops, tbres and testbed).  The new order says that if the
swapper of an active experiment is an admin, only other admins have
their accounts (and homedirs) propagated to the experiment.  Analogous
for non-admin experiments.

Add DYNAMICROOTPASSWORDS, default to true, which causes the root
passwords on emulab images to be changed each time they are allocated
to an experiment. This is to prevent the same password on every node
for years at a time!
parent fe747960
......@@ -1523,6 +1523,8 @@ MIN_UNIX_GID=6000
DELAYTHRESH=2
PELABSUPPORT=0
ELVIN_COMPAT=0
ISOLATEADMINS=1
DYNAMICROOTPASSWORDS=1
#
# XXX You really don't want to change these!
......@@ -2835,6 +2837,8 @@ s%@FRISEBEEMCASTPORT@%$FRISEBEEMCASTPORT%g
s%@WINSUPPORT@%$WINSUPPORT%g
s%@CVSSUPPORT@%$CVSSUPPORT%g
s%@CHATSUPPORT@%$CHATSUPPORT%g
s%@ISOLATEADMINS@%$ISOLATEADMINS%g
s%@DYNAMICROOTPASSWORDS@%$DYNAMICROOTPASSWORDS%g
s%@STAMPS@%$STAMPS%g
s%@ARCHIVESUPPORT@%$ARCHIVESUPPORT%g
s%@MIN_UNIX_UID@%$MIN_UNIX_UID%g
......
#
# EMULAB-COPYRIGHT
# Copyright (c) 2000-2007 University of Utah and the Flux Group.
# Copyright (c) 2000-2008 University of Utah and the Flux Group.
# All rights reserved.
#
AC_PREREQ(2.13)
......@@ -202,6 +202,8 @@ AC_SUBST(MIN_UNIX_GID)
AC_SUBST(DELAYTHRESH)
AC_SUBST(PELABSUPPORT)
AC_SUBST(ELVIN_COMPAT)
AC_SUBST(ISOLATEADMINS)
AC_SUBST(DYNAMICROOTPASSWORDS)
#
# Offer both versions of the email addresses that have the @ escaped
......@@ -275,6 +277,8 @@ MIN_UNIX_GID=6000
DELAYTHRESH=2
PELABSUPPORT=0
ELVIN_COMPAT=0
ISOLATEADMINS=1
DYNAMICROOTPASSWORDS=1
#
# XXX You really don't want to change these!
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment