Run "onmode" in a script spawned out from a sctipt
Posted in 2007
Topics: High Availability & Replication, Server Administration
>> Jonathan Leffler wrote: "The original error message should, and I
believe does, say 'Must be a DBSA to run this program'"<<
- Yes, it is. It was my mistyping.
- The userid we place in /etc/group for informix is "batch", which is only
used by our admin. poeple to run some special jobs at night. Its is not a
common userid that other people can use.
>>> Ken Doe mentioned about the visudo command to make an entry as
"userid(batch) hostname(crtes) = (informix)
"NOPASSWD: /home/accounting/bin/hdr_manage" # (inside this script
the onmode command is run).
I only find out the /etc/sudoers (see attached), but don't know how to make
entry with visudo although it is mentioned in this sudoers text file (There
is no visudo command in our system, SunOS 5.9)
I would much appreciate if you can advise me how to implement these
entries.
I am an AP and there is no DBA guy in our small team; and the Unix
administrator can't help much.
Regards,
Long Nguyen.
(See attached file: sudoers.doc)
Guys-
I wrote a C program which uses the setresuid() and setresgid()
commands to allow a script run by a lower permission user to execute
ontape -s and run our Informix backups without ever knowing the Informix
password.
You could do something similar, perhaps passing the command you
want to run into a C program and checking it against an approved list
before the program executes it.
--EEM
-----Original Message-----
From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
Long Nguyen
Sent: Wednesday, January 31, 2007 12:11 AM
To: ids@iiug.org
Subject: Run "onmode" in a script spawned out from a sc.... [8324]
>> Jonathan Leffler wrote: "The original error message should, and I
believe does, say 'Must be a DBSA to run this program'"<<
- Yes, it is. It was my mistyping.
- The userid we place in /etc/group for informix is "batch", which is
only
used by our admin. poeple to run some special jobs at night. Its is not
a
common userid that other people can use.
>>> Ken Doe mentioned about the visudo command to make an entry as
"userid(batch) hostname(crtes) = (informix)
"NOPASSWD: /home/accounting/bin/hdr_manage" # (inside this script
the onmode command is run).
I only find out the /etc/sudoers (see attached), but don't know how to
make
entry with visudo although it is mentioned in this sudoers text file
(There
is no visudo command in our system, SunOS 5.9)
I would much appreciate if you can advise me how to implement these
entries.
I am an AP and there is no DBA guy in our small team; and the Unix
administrator can't help much.
Regards,
Long Nguyen.
(See attached file: sudoers.doc)
************************************************************************
*******
Forum Note: Use "Reply" to post a response in the discussion forum.