Page History

...

• DONE Any MIT user can log into cluster machines using their Kerberos passwords and their AFS home directories.
• DONE Root logins on cluster machines are not permitted, but users can su to root once they log in as themselves.
• DONE Users can change their Kerberos passwords with the passwd command.
• DONE Private machine admins can configure who can log into machines remotely and locally with the /etc/athena/access file. They can also tag accounts as "local" and not part of the Hesiod/AFS namespace.
• DELAY Athena machines tagged as quickstations display a timer and nagging warnings to log out after a set period of time.
• DESUPPORT Users can temporarily enable and disable remote access daemons on Athena machines with the access_on and access_off commands, if the machine is configured to allow this.

...

Planned solution: Instead of being invoked from athena-dotfiles, the debathena-bugme package will include an xsession script which wraps . If the hostname is found on the list of quickstations the script will wrap the session with the bugme program, otherwise it will do nothing.   The bugme program will may need to be tested for interference with gnome-session; there is already a bug report filed against it for interference with the screensaver in bugs 27097.. Athena bugs 27097 lists a problem but has been un-verified. The tricky part is to advance the code to deal with current window manager conventions: don't decorate, font properly, keep on top, even in the face of compositing.

Getting these issues right is reasonable, but should not block roll-out to general clusters. We will do this work after Early relese, but it will need to be finished when Athena 10 displaces Athena 9 as the standard release on all systems.

Milestone: Follow-on mini-projectMilestone: Cluster (one day).

Status: Not Done.

...

...