[Pkg-nagios-devel] adminpassword and debconf

[sean finney]

getting back to this...

On Tue, Jan 24, 2006 at 06:45:18PM +0100, Marc Haber wrote:
> I find it better, however, to always reset the password. We don't use
> the debconf database for persistent storage, so the "is not a
> database" argument doesn't hold here. We should, however, purge the
> password from Debconf after resetting it.

i agree that's better.  if no password is supplied then i suppose
we should default to not creating the htpasswd file in the first
place?  if i understand apache correctly, a non-existent file should
result in 403's.

> Using echo in the config is a bad idea, IMO. It cannot be translated,
> and being interactive ourselves is discouraged. If we interact with
> the user, it should be through debconf.

i think that the focus was less on the echo/debconf issue (on which
i aggree) but more on the idea of how it should function.  in any
case, resetting and flushing the password every run would make
this moot.

> The more I think about it, the more I believe that we should offer a
> documented nagiospw wrapper around htpasswd and remove the debconf
> password stuff completely.

i'm kind of fond of having some level of support within debconf, and
am skeptical about what this would gain us.

> > > I'd say that it's not worth the hassle and would vouch for removing
> > > the debconf question for the admin name and use nagiosadmin or
> > > nagiosadm everywhere.
> > 
> > agreed, that makes sense.  was kind of overkill anyway.  

taking a look at the code, we were doing stuff with the adminusername
after all, but i remain convinced by your argument that we should
stay with nagiosadmin in any case.  the kind of person that would want
to customize this probably is either anal retentive and would be happier
doing it themselves or is using a configuration far more complicated
than simple htpasswd (like ldap authentication).



	sean
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-nagios-devel/attachments/20060131/0960437f/attachment.pgp