[SGVLUG] The SGVLUG website -- Mambo-style

Tom Emerson osnut at pacbell.net
Sat Jul 2 16:53:28 PDT 2005


> -----Original Message-----
> [mailto:sgvlug-bounces at sgvlug.net] On Behalf Of Dustin
> On Sat, 2 Jul 2005, Tom Emerson wrote:
> 
> > Yeah, I thought about that roughly 3 ohmoseconds after I 
> > did it (whem I was posting the above message) but actually
> > you may be Pretty safe anyway
> 
> Still, I'd rather it not be there.  I think the mailing list 
> notice is sufficient.

OK, OK -- I can take a hint as well as the next guy -- it's off
The site now (with instructions to ask "on the list" if you've
Been under a rock for the last three weeks)

> Plus I don't much like what I see of Apache's authentication 
> capabilities (kinda looks like I'd have to create the 
> accounts by hand, no automatic capability)

If you're talking about a .httpsswd file (or whatever that is)
I believe you can script it to take multiple names, but yeah,
You would have to pre-create an input file, at which point you
Might as well do it by hand anyway.  I believe you can add a
Mod_db module to apache that will let you authenticate against 
A database of your own choosing, and possibly even auth against
A radius/AAA server (which in turn would use a database for id's
And passwords)

> > I noticed that once someone is marked as "admin", they CANNOT Be 
> > demoted -- you have to purge the user entirely.
> 
> Nah, nothing that complicated.  You just have to be 
> superadmin (the "real"  root account) to do it.  :-)

Makes sensse.  Just was surprised to see it as an end-user-admin
That one mouse-slip could get you into a situation you couldn't recover from

[...]
> He can't do that entirely, since I can boot him as 
> superadmin.  However, the point wasn't that it couldn't be 
> dealt with, but rather that it would screw up our testing.

Well, unless people actually take some time to view, comment, and/or
Post some poll results, I'd pretty much say "we're done" with this
One in particular -- we see it's strengths, know what we want
To do as a "workaround", and for what we would use it for, it is
Good enough and has the "added plus" of being fully GPL.




More information about the SGVLUG mailing list