SCIENTIFIC-LINUX-USERS Archives

April 2010

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Steven Timm <[log in to unmask]>
Reply To:
Steven Timm <[log in to unmask]>
Date:
Thu, 29 Apr 2010 09:12:03 -0500
Content-Type:
TEXT/PLAIN
Parts/Attachments:
TEXT/PLAIN (52 lines)
Again, the below is very dangerous if the globus account is
to be used in anything grid-related, which is probably the only
reason you would need a globus account.

[root@fcdf1x1 ~]# more /etc/sudoers
Runas_Alias GLOBUSUSERS = ALL, !root

globus ALL=(GLOBUSUSERS) \
         NOPASSWD: \
         /usr/local/vdt-2.0.0/globus/libexec/globus-job-manager-script.pl *

globus ALL=(GLOBUSUSERS) \
         NOPASSWD: \
         /usr/local/vdt-2.0.0/globus/libexec/globus-gram-local-proxy-tool *


And if you have a limited list of accounts that globus should be able
to su to, spell them out individually.

Steve



On Thu, 29 Apr 2010, Tim Edwards wrote:

> On 29/04/10 07:53, vivek chal wrote:
>> hi all,
>>
>> i have a user account named globus and i want to give it all the
>> administrative privileges
>>
>>
>>
>> What is the command to do it.
>
> As root run 'visudo' and add a line like this:
> globus     ALL=(ALL)  NOPASSWD: ALL
>
> This will give globus the ability to run any command as root by putting
> sudo before it, without being prompted for his/her own password, eg.:
> sudo service something restart
>
> Tim
>

-- 
------------------------------------------------------------------
Steven C. Timm, Ph.D  (630) 840-8525
[log in to unmask]  http://home.fnal.gov/~timm/
Fermilab Computing Division, Scientific Computing Facilities,
Grid Facilities Department, FermiGrid Services Group, Assistant Group Leader.

ATOM RSS1 RSS2