[Linux-HA] enabling another account to use cibadmin -Q

Serge Dubrouski sergeyfd at gmail.com
Mon Sep 17 12:23:21 MDT 2007


As far as I understand it allows you to control what group of users
can get access to what parts of Heartbeat's functionality.

On 9/17/07, Doug Knight <dknight at wsi.com> wrote:
> Thanks Serge, this worked fine. So, does the apiauth settings have
> anything to do with controlling user account access to command line
> utilities in heartbeat?
>
> Doug
> On Mon, 2007-09-17 at 09:58 -0600, Serge Dubrouski wrote:
>
> > Include that user into haclient group.
> >
> > On 9/17/07, Doug Knight <dknight at wsi.com> wrote:
> > > Hi,
> > > I have been looking at the documentation for ha.cf, and I'm not clear on
> > > how to enable a second user to access command line tools, specifically
> > > cibadmin and crm_resource. I have some tasks that run via crontab, and
> > > I'm revising the scripts to check for their required resource is running
> > > locally before executing the main task. Since the scripts are automated
> > > (i.e. running without a tty), I cannot use the /etc/sudoers file (which
> > > I have working as a command line execution). I'm pretty sure from
> > > reading the documentation that I need to configure apiauth in ha.cf, but
> > > currently its commented out, and I use only hacluster and root for all
> > > my command line needs. I'm also not clear which client needs to be
> > > included in the list (plus I don't want to accidentally disable
> > > hacluster by my changes, need to get it right the first time due to
> > > ongoing testing, etc). Can someone provide info on what I should set
> > > apiauth to (if that's the right item)? Assume the accessing accounts are
> > > root, hacluster, and dknight.
> > >
> > > Thanks,
> > > Doug Knight
> > > WSI Inc.
> > > Andover, MA
> > > _______________________________________________
> > > Linux-HA mailing list
> > > Linux-HA at lists.linux-ha.org
> > > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> > > See also: http://linux-ha.org/ReportingProblems
> > >
> >
> >
> _______________________________________________
> Linux-HA mailing list
> Linux-HA at lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
>


-- 
Serge Dubrouski.



More information about the Linux-HA mailing list