06.03.2013 Views

opsi Version 3.3.1 - opsi Download - uib

opsi Version 3.3.1 - opsi Download - uib

opsi Version 3.3.1 - opsi Download - uib

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

6.4.2.2. User pcpatch<br />

6. <strong>opsi</strong>-Module: depot server<br />

Access to the client configuration files and the software depot should be restricted and<br />

should be granted only to the system administrators and the software distribution<br />

service (<strong>opsi</strong> preLoginLoader) running on the client. This for instance is required to meet<br />

the license agreements, which is in the system administrators responsibility.<br />

To allow this the user account 'pcpatch' gets the user-ID 992, the home directory<br />

'/opt/pcbin/pcpatch' and as default the password 'Umwelt'. Change the password with:<br />

<strong>opsi</strong>-admin -d task setPcpatchPassword<br />

The user 'pcpatch' is the owner of the <strong>opsi</strong> configuration files and on this account run<br />

the <strong>opsi</strong> service processes. Also the <strong>opsi</strong>-PreLoginLoader uses this account for<br />

connecting the depot server shares.<br />

6.4.2.3. Group pcpatch<br />

Beside the user 'pcpatch' there is also a group 'pcpatch'. The user 'pcpatch' as well as<br />

the group 'pcpatch' has full access on most of the <strong>opsi</strong> files. All the administrators of the<br />

<strong>opsi</strong> depot server should therefor be member of the group 'pcpatch', so they have write<br />

access to the configuration data.<br />

A user can join group 'pcpatch' by: 'addgroup pcpatch'.<br />

6.4.2.4. Group <strong>opsi</strong>admin<br />

Members of the group '<strong>opsi</strong>admin' are permitted to connect the <strong>opsi</strong>-webservice and<br />

can use for instance the '<strong>opsi</strong>-configed' configuration editor. Therefor all <strong>opsi</strong><br />

administrators should be members of the group 'pcpatch'.<br />

A user can join group '<strong>opsi</strong>admin' by: 'addgroup <strong>opsi</strong>admin'.<br />

6.4.3. Depot share with software packets (install)<br />

The depot-Share provides all the software-packets which are installable by the client<br />

task 'wInst'. The default directory for the software packets is the directory<br />

'/opt/pcbin/install'. In this directory each software packet has its own sub directory<br />

96

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!