[systemd-devel] Some questions

2022-12-22 Thread Wang, Lei
Hi, Really appreciate your great work! I have a question during greping "AddMatch" in the code: I see there are 2 `AddMatch` method calls sent to the bus, but I can't find the place to handle this signal. Could you point me out the place it is handled? Thanks! Another question is, how can I log

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Dominik George
Hi, > The former. But you can register users with homed easily. i.e. just > "upload" a JSON user record to it, and it will manage it. But this > step is necessary. That gives me a gratis cache layer on top, right ;)? But it means that my users will look like homed-managed and cannot be differen

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Lennart Poettering
On Do, 24.11.22 14:29, Dominik George ([email protected]) wrote: > Hi Lennart, > > > (BTW; I kinda hope that one day systemd-homed could directly > > authenticate home directories via OIDC too. In fact, I want it so that > > you can just type in any OpenID identity on a login prompt, and this > >

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Dominik George
Hi Lennart, > (BTW; I kinda hope that one day systemd-homed could directly > authenticate home directories via OIDC too. In fact, I want it so that > you can just type in any OpenID identity on a login prompt, and this > would authenticate a user and create a local homedir on the fly if > needed.)

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Dominik George
Hi, > how do you intend to support getty logins, i.e. non-graphical > text-based only logins, where you cannot just open a webbrowser? oidc > device flow? Exactly. > That's tough. PAM has a lot on implicit and explicit state attached to > the PAM handle... And you can have PAM conversations and

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Lennart Poettering
On Do, 24.11.22 13:36, Dominik George ([email protected]) wrote: > Hi, > > > (BTW; I kinda hope that one day systemd-homed could directly > > authenticate home directories via OIDC too. In fact, I want it so that > > you can just type in any OpenID identity on a login prompt, and this > > would a

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Dominik George
Hi, > (BTW; I kinda hope that one day systemd-homed could directly > authenticate home directories via OIDC too. In fact, I want it so that > you can just type in any OpenID identity on a login prompt, and this > would authenticate a user and create a local homedir on the fly if > needed.) that's

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Lennart Poettering
On Do, 24.11.22 12:46, Dominik George ([email protected]) wrote: > Ah, so what would happen here is that even if the MUltiplexer, which > is privileged, talks to my IPC service and receives the "privileged" > part, the Multiplexer will strip it off for me unless a privileged > user is talking to

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Dominik George
Hi Lennart, thanks for your elaborate reply (although I completely missed the big paragraph on the reasons for Varlink in the docs, making that part a stupid question on my side ;)). > Basically, a user record consist of multiple sections (i.e. json > fields contain subobjects), one is called "pr

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Lennart Poettering
On Do, 24.11.22 00:58, Dominik George ([email protected]) wrote: > Hi, > > for some time now, I have been investigating how to best make a > desktop system talk to a web API (HTTP, REST) for user management, so > NSS and PAM make HTTP requests to an API to verify authentication > (using OIDC) and

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread Dominik George
Hi, > IMHO your best solution would be to use https://sssd.io/ and > https://www.keycloak.org/ to bundle your systems together. > > Keycloak would speak to your OIDC provider and translates the information in > something sssd can understand. sssd than is put into your nsswitch.conf as > provid

Re: [systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-24 Thread killermoehre
> Am 24.11.2022 um 00:58 schrieb Dominik George : > > Hi, > > for some time now, I have been investigating how to best make a > desktop system talk to a web API (HTTP, REST) for user management, so > NSS and PAM make HTTP requests to an API to verify authentication > (using OIDC) and to retrieve

[systemd-devel] Some questions on userdbd and providing a compatible service

2022-11-23 Thread Dominik George
Hi, for some time now, I have been investigating how to best make a desktop system talk to a web API (HTTP, REST) for user management, so NSS and PAM make HTTP requests to an API to verify authentication (using OIDC) and to retrieve NIS information (using REST endpoints). One of the approaches I

Re: [systemd-devel] Some Questions About Systemd and Dbus-daemon

2020-03-31 Thread Lennart Poettering
On Mo, 30.03.20 21:28, 海阔天空 ([email protected]) wrote: > Hi everyone, > > > I have some questions and I'd like to know if you can help to answer them. > > > 1. What is the relationship among systemd、dbus(libdbus,dbus-daemon) > and dbus-broker? dbus-broker and dbus-daemon are two different implemen

[systemd-devel] Some Questions About Systemd and Dbus-daemon

2020-03-30 Thread ????????
Hi everyone, I have some questions and I'd like to know if you can help to answer them. 1. What is the relationship among systemd??dbus(libdbus,dbus-daemon) and dbus-broker? 2. Does systemd rely on dbus-broker(dbus-daemon) or vice versa? 3. Is org.freedesktop.DBus generated first or is dbus-br

[systemd-devel] Some questions regarding seat preperty CanGraphical

2015-11-30 Thread Laércio de Sousa
I'm contributing with some DM projects (LightDM, SDDM) in order to provide full systemd-logind multi-seat support. IMHO the most challenging part is monitoring seat's property CanGraphical an reacting properly when this property changes. If I understand systemd-logind code correctly, a seat will o