YaST/Web/Architecture

From openSUSE

WebYaST Architecture

See naming conventions to understand the 'WebYaST speak' ;-)

The YaST Webclient communicate via HTTP(s) with the YaST Webservice. The user has to authenticate ( username, password ) to the host via PAM (Pluggable Authentication Modules) which is available on every linux system.

The YaST Webclient sends requests ( e.g. create a user, install patch) to the YaST Webservice. This service checks if the user has the right to execute this request via PolicyKit. For each kind of request there is PolicyKit rule defined. These rights has to be granted to the concerning user.

After permission check the request will be send via DBUS to the SCR agent of YaST. The return value will be given back to YaST-Webclient in XML or JSON format.

Patches will be handled by PackageKit. These requests will also be sent from the YaST Webservice to PackageKit via DBUS.