SCIENTIFIC-LINUX-USERS Archives

April 2010

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Harry Enke <[log in to unmask]>
Reply To:
Harry Enke <[log in to unmask]>
Date:
Thu, 29 Apr 2010 20:08:49 +0200
Content-Type:
text/plain
Parts/Attachments:
text/plain (72 lines)
If you use instead groups of globus users:

  Runas_Alias GPOOL=%gridpool1,%gridpool2
(with gridpool1 being groups of globus_users)
and correspondingly
  globus ALL=(GPOOL)	

you do not need to update the sudoers file when adding new globus

Harry

Steven Timm wrote:
> Again, the below is very dangerous if the globus account is
> to be used in anything grid-related, which is probably the only
> reason you would need a globus account.
>
> [root@fcdf1x1 ~]# more /etc/sudoers
> Runas_Alias GLOBUSUSERS = ALL, !root
>
> globus ALL=(GLOBUSUSERS) \
> NOPASSWD: \
> /usr/local/vdt-2.0.0/globus/libexec/globus-job-manager-script.pl *
>
> globus ALL=(GLOBUSUSERS) \
> NOPASSWD: \
> /usr/local/vdt-2.0.0/globus/libexec/globus-gram-local-proxy-tool *
>
>
> And if you have a limited list of accounts that globus should be able
> to su to, spell them out individually.
>
> Steve
>
>
>
> On Thu, 29 Apr 2010, Tim Edwards wrote:
>
>> On 29/04/10 07:53, vivek chal wrote:
>>> hi all,
>>>
>>> i have a user account named globus and i want to give it all the
>>> administrative privileges
>>>
>>>
>>>
>>> What is the command to do it.
>>
>> As root run 'visudo' and add a line like this:
>> globus ALL=(ALL) NOPASSWD: ALL
>>
>> This will give globus the ability to run any command as root by putting
>> sudo before it, without being prompted for his/her own password, eg.:
>> sudo service something restart
>>
>> Tim
>>
>


-- 
******************************************************************
* Harry Enke                            AstroGrid-D, WissGrid    *
*                                       Phone : +49-331-7499-433 *
* Email : [log in to unmask]                  FAX   : +49-331-7499-429 *
******************************************************************
* Astrophysikalisches Institut Potsdam  (AIP)                    *
* D-14482 Potsdam                       An der Sternwarte 16     *
* Vorstand: Prof. Dr. Matthias Steinmetz, Peter A. Stolz         *
* Stiftung privaten Rechts,                                      *
* Stiftungsverzeichnis Brandenburg: III/7-71-026                 *
******************************************************************

ATOM RSS1 RSS2