Re: user account
On 29/04/10 07:53, vivek chal wrote: hi all, i have a user account named globus and i want to give it all the administrative privileges What is the command to do it. As root run 'visudo' and add a line like this: globus ALL=(ALL) NOPASSWD: ALL This will give globus the ability to run any command as root by putting sudo before it, without being prompted for his/her own password, eg.: sudo service something restart Tim
Re: user account
Don't do it! If you install globus properly there are instructions to put a couple of lines into /etc/sudoers that give the globus account the permissions it needs, but no more. and even those are only needed if you are running Web services GRAM GT4 which is likely to be deprecated soon. I can send those lines under separate cover if necessary. Also I have never been able to make that feature work without disabling SELinux altogether. Steve On Thu, 29 Apr 2010, vivek chal wrote: hi all, i have a user account named globus and i want to give it all the administrative privileges What is the command to do it. Any help is appreciated thanks Vivek Chalotra GRID Project Associate, High Energy Physics Group, Department of Physics Electronics, University of Jammu, Jammu 180006, INDIA. -- -- Steven C. Timm, Ph.D (630) 840-8525 t...@fnal.gov http://home.fnal.gov/~timm/ Fermilab Computing Division, Scientific Computing Facilities, Grid Facilities Department, FermiGrid Services Group, Assistant Group Leader.
Re: user account
Again, the below is very dangerous if the globus account is to be used in anything grid-related, which is probably the only reason you would need a globus account. [r...@fcdf1x1 ~]# more /etc/sudoers Runas_Alias GLOBUSUSERS = ALL, !root globus ALL=(GLOBUSUSERS) \ NOPASSWD: \ /usr/local/vdt-2.0.0/globus/libexec/globus-job-manager-script.pl * globus ALL=(GLOBUSUSERS) \ NOPASSWD: \ /usr/local/vdt-2.0.0/globus/libexec/globus-gram-local-proxy-tool * And if you have a limited list of accounts that globus should be able to su to, spell them out individually. Steve On Thu, 29 Apr 2010, Tim Edwards wrote: On 29/04/10 07:53, vivek chal wrote: hi all, i have a user account named globus and i want to give it all the administrative privileges What is the command to do it. As root run 'visudo' and add a line like this: globus ALL=(ALL) NOPASSWD: ALL This will give globus the ability to run any command as root by putting sudo before it, without being prompted for his/her own password, eg.: sudo service something restart Tim -- -- Steven C. Timm, Ph.D (630) 840-8525 t...@fnal.gov http://home.fnal.gov/~timm/ Fermilab Computing Division, Scientific Computing Facilities, Grid Facilities Department, FermiGrid Services Group, Assistant Group Leader.
