Delegate ssh/sftp to all users

[stephdl]

NethServer/dev#6059

[nethbot]

in 7.7.1908/autobuild:

• nethserver-cockpit-1.4.2-1.2.pr219.g6f4a9ac.ns7.noarch.rpm x86_64 armhfp aarch64
• nethserver-cockpit-lib-1.4.2-1.2.pr219.g6f4a9ac.ns7.noarch.rpm x86_64 armhfp aarch64

[DavidePrincipi]

I like this minimal change approach! It surely works in most of our use cases.

However it has a limitation with remote LDAP account providers. You are assuming there is a locals group, but the users primary group can be named differently.

This limitation is not present with AD because it has a well defined structure and builtin entries like "domain users". There should always be a "domain users" group: we can assume it exists.

As alternative, how much is it complex to implement an abstract "Everyone" group? I guess a Match All line in sshd_config can do the job... Maybe it requires also some UI changes.

[stephdl]

well if you want a match all, I think that * is for us, we have no brain to calculate whatever the group name...

What do you think ?

[nethbot]

in 7.7.1908/autobuild:

• nethserver-cockpit-1.4.2-1.3.pr219.g82b5c89.ns7.noarch.rpm x86_64 armhfp aarch64
• nethserver-cockpit-lib-1.4.2-1.3.pr219.g82b5c89.ns7.noarch.rpm x86_64 armhfp aarch64

[DavidePrincipi]

Is this PR still required? Can we close it?

[stephdl]

set closed obsoleted by #220