Displaying 1 result from an estimated 1 matches for "permitgidoverride".
2015 Apr 13
1
[Bug 2380] New: [PATCH] Optionally allow pam_setcred to override gid
...comparing getgid() before and
after calling do_pam_setcred. If the gid changes it sets pw->gid to
the new gid, which is used in later functions. I don't know if this is
considered the proper way to achieve that behavior in a safe way but it
seemed logical to me. The behavior is optional; PermitGidOverride=no
is the default.
As for the reasoning, this is for a scheduled environment using Slurm.
I am developing a pam module that "adopts" ssh processes into the
appropriate batch job on the node. Users can launch jobs via Slurm
that run with their gid as one of their supplementary groups....