Running service-Guard commands from non-root user

[Vincent Farrugia]

Hello,

Can the above be done? Is there a work-around for this?

Points will be assigned.

Thanks in advance,
Vince

[Mark Grant]

I wouldn't have thought so. Many of the things that service guard has to do e.g. ifconfig, umount, vgexport, vgimport etc etc all need to be run as root.

[Ralph Grothe · Accepted solution]

If it's only viewing the cluster state
you may create an /etc/cmcluster/cmclnodelist
and place accounts therein to run cmviewcl.

If it is more involved (e.g. running and halting packages or nodes etc) you could try sudo.

http://www.courtesan.com/sudo/

[Scott Van Kalken]

I agree with ralph

/etc/cmcluster/cmclnodelist is the go.

The problem (as Ralph and Mark point out) is that if you want to do anything other than view the cluster, you run into trouble.

If it's an "operator" type scenario, where you want someone else to run specific stuff, I would go fo sudo and a shell script like a menu.

Alternatively, you can use sudo and teach others how service guard works, which is beeter I think :)

Scott.