NFS Mount

[Jade Bulante]

I would like to have a user issue a mount command to a volume group. Is this possible? I get "you must be root to mount".

Please advise.

[Jeff_Traigle]

Sure, it's possible. Multiple ways of doing it actually. The easiest is to install sudo. (I think it's part of the Internet Express bundle from http://software.hp.com/ or there are numerous references in the forums here where to just get sudo on it's own.) See the following thread on how to configure the sudoers file once it's installed.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=647203

[Sanjay_6]

Hi Jade,

restricted sam is one way to go. you have to build restricted sam for the user and allow him to use the mount / unmount filesystem option.

another way to do this would be allow him sudo access to mount / unmount filesystems.

Hope this helps.

Regds

[Rick Garland]

As stated, there are many ways to accomplish this task. SUDO is a good tool for allowance of this function (and many more). SUDO will keep logs of who is doing what and when so you will have the info should it be required.

Another package is PowerBroker. Allows user to become another user (passwd or no passwd) and again keeps good log files if required.

[Jeff_Traigle]

Just be aware that with restricted SAM, I doubt you can restrict exactly which file systems the user can mount/unmount. (I haven't tried it, but, given the flexibility it left with user administration, I'm guessing I'm not far off on my assumption here.) If you want to restrict the user to only be able to mount/unmount particular file systems, then you really want to go with sudo so you can specify the exact command you want to allow.

[Dave Olker]

Hi Jade,

HP will soon be introducing a new feature that will likely be what you're looking for - it's called RBAC or Role Based Access Control. With RBAC you can assign certain administrative priviledges to specific non-root users, for example allowing a set of users the ability to mount, unmount, export, and unexport filesystems.

Once released, I think this would be the best solution for your administrative quandry.

Regards,

Dave