Users
From Rivendell Wiki
Users and passwords cause a lot of confusion at times, so here's a quick overview of the various flavors of users and which password is associated with them. There are three 'applications' (using the term very loosely) that have users associated with them: Linux, Rivendell programs, and mySQL. The passwords for the various accounts may or may not be important to the Rivendell programs.
Contents |
Linux accounts:
root: The superuser account on a Linux system password: doesn't matter to Rivendell
rd-user: The non-privileged account a person logs in as to run use the Rivendell programs. It doesn't have to be called rd-user. It can be called anything you like. This is the account referenced in /etc/rd.conf under the Identity section. Note that the password in this section in rd.conf is *not* the password for the Linux rd-user account. This is confusing, but is the case due to historical reasons.
[Identity]
Password=letmein
AudioOwner=rd-user
AudioGroup=users
password: doesn't matter, but should be different than the one in rd.conf for security. You don't want a publically readable file advertising your Linux user passwords!
mySQL accounts:
root: The mySQL root account. This is *not* to be confused with the Linux root account and should not have the same password as the Linux root account for security considerations. Programatically it doesn't matter if they're the same or not.
rduser: the account created in the mySQL database the first time that rdadmin is run. This account has no relation to the Linux rd-user account, and the passwords should not be the same for security reasons.
When rdadmin is run for the first time, it reads /etc/rd.conf and creates the rduser account in mySQL and sets the rduser password to the Password entry found in the Identity section (see above). This account/password is used by the Rivendell programs when interfacing with mySQL - it is never used directly by end users. Note that in releases earlier than 0.9.34 the password 'letmein' was hard coded in rdadmin causing the Rivendell programs to fail to start if it was changed in /etc/rd.conf. This has been fixed in the current version.
Rivendell accounts:
admin: The administrative account used to manage the Rivendell system. This ID set is entered when you run rdadmin. It may or may not have a password associated with it, although one is highly recommended! The admin account manages permissions and functionality in the Rivendell system. It can change system settings, add/remove users accounts, associate cards and ports with IO devices, etc.
user: The default user account, internal to Rivendell. This account is the one which normally is used for day to day operations. By default, it can do pretty much anything except administrative functions, and it can not edit or create templates. Additional accounts may be desirable, depending on station policy, with more restricted or expnaded rights.
If scheduling software is used, it is a good idea to create a second user account, identical to the default 'user', however which has the 'Modify Template' checked in RDAdmin->ManageUsers. Without that right, the 'Edit Events', 'Edit Clocks', and 'Edit Grids' is grayed out in RDLogManager. You don't want anybody to be able to change them however, once they're created. Edit them with the user account with elevated permissions; use the default 'user' account (or other accounts you've created) for day to day operations.
This id/password doesn't have any direct relationship to the Linux centric rd-user account.
I'm unclear what effect changing the password has here, as I can change the user password in rdadmin, yet when I start rdairplay, rdlibrary, etc. I'm not prompted to enter a password. They just start.
Multiple user accounts can be created, but I'm not sure when/where you identify which account to use. I'm probably missing the obvious here, so maybe someone else can chime in.
Usage:
Log into Linux as rd-user (or whatever you called the Linux account) for day to day operations when using the Rivendell programs (rdairplay, rdlogedit, rdlibrary, etc.). Don't run the Rivendell programs as root.
Rivendell daemons: (caed, ripcd, rdcatchd) started by root, either at startup. On a SuSE system, one can enable the daemons to be started at bootup with the following command (as root):
chkconfig rivendell on
This will enable them in runlevel 3 and 5. Starting the Rivendell programs should also automatically start the daemons if they're not already started. mySQL must already be running however. The Rivendell programs don't start it.
