[hylafax-users] Faxrm nightmare - no permissions - /bin/false - 5 hours later..

["Chris SJF" <chin@sjf.co.uk>]

Hi,

After about 5 hours fiddling with faxrm & reading posts I still had no
solution.

I read a post that said; after someone had asked for a "global" admin
user capable of deleting anyone's jobs:
'Not trying to say that this is a bad idea, but how is this any easier
than:
$ su -c "faxrm 137" faxinguser"'

Well, the problem with this is the user must have a shell account. If
they don't, it doesn't work.
Faxrm will silently fail. For security reasons I have users without
shells ( i.e. /bin/false) they can access daemons,etc, but have no way
to get a shell.
So you can't use su under these circumstances. However, I did try adding
root as an admin user with: faxadduser -a gggg -p gggg root , with no
joy. Infact, any user added this way couldn't "faxrm" any other users
job, either with "faxrm -a .." or telneting to the server.
I did, frankly get a little peeved about it. I'm using 4.1.2. I wonder
if this has been fixed in a later version? Does anyone else have a
problem with the current "security" methods. All I need is a way to
remove users' jobs, without having to give them a shell, or reading the
raw queue files.

Any pointers would be massively appreciated.

Regards, Chris. 




____________________ HylaFAX(tm) Users Mailing List _______________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
 On UNIX: mail -s unsubscribe hylafax-users-request@hylafax.org < /dev/null
  *To learn about commercial HylaFAX(tm) support, mail sales@hylafax.org.*