Bug 1395195 - [RFE] NFS-Ganesha cluster setup should be able to use sudo instead
Summary: [RFE] NFS-Ganesha cluster setup should be able to use sudo instead
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat
Component: common-ha
Version: rhgs-3.2
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Patric Uebele
QA Contact: storage-qa-internal@redhat.com
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-15 11:47 UTC by Niels de Vos
Modified: 2019-07-09 08:22 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-07-09 08:22:05 UTC
Target Upstream Version:

Attachments (Terms of Use)
ganesha-ha-sudo.sh (35.38 KB, text/plain)
2016-11-15 13:18 UTC, Chris Blum 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Description Niels de Vos 2016-11-15 11:47:15 UTC 
Description of problem:
The ganesha-ha.sh script executes many commands and expects root privileges. In many enterprise environments, scripts are not supposed to run as root or surely not able to login over ssh as root. ganesha-ha.sh is no exception and should accommodate for running as non-root with sudo.

Additional info:
Chris Blum has hacked the script to run as non-root where the needed commands have been prefixed with 'sudo'. The environment was modified so that the non-root user could only execute particular commands.
Comment 4 Chris Blum 2016-11-15 13:18:03 UTC 
Created attachment 1220832 [details]
ganesha-ha-sudo.sh

This is the script successfully used onsite, which enabled us to activate NFS-ganesha using the hacluster user (which is created and defined anyways during the NFS-ganesha setup)
Obviously the sudoers file needs to be adjusted additionally...
Comment 8 Kaleb KEITHLEY 2017-08-23 12:37:37 UTC 
storhaug
Comment 9 Kaleb KEITHLEY 2017-08-23 12:38:00 UTC 
storhaug
Comment 13 Patric Uebele 2019-07-09 08:22:05 UTC 
Don't see large demand for this, closing.
Note You need to log in before you can comment on or make changes to this bug.