Again, the below is very dangerous if the globus account is
to be used in anything grid-related, which is probably the only
reason you would need a globus account.
[r...@fcdf1x1 ~]# more /etc/sudoers
Runas_Alias GLOBUSUSERS = ALL, !root
globus ALL=(GLOBUSUSERS) \
NOPASSWD: \
/usr/local/vdt-2.0.0/globus/libexec/globus-job-manager-script.pl *
globus ALL=(GLOBUSUSERS) \
NOPASSWD: \
/usr/local/vdt-2.0.0/globus/libexec/globus-gram-local-proxy-tool *
And if you have a limited list of accounts that globus should be able
to su to, spell them out individually.
Steve
On Thu, 29 Apr 2010, Tim Edwards wrote:
On 29/04/10 07:53, vivek chal wrote:
hi all,
i have a user account named globus and i want to give it all the
administrative privileges
What is the command to do it.
As root run 'visudo' and add a line like this:
globus ALL=(ALL) NOPASSWD: ALL
This will give globus the ability to run any command as root by putting
sudo before it, without being prompted for his/her own password, eg.:
sudo service something restart
Tim
--
------------------------------------------------------------------
Steven C. Timm, Ph.D (630) 840-8525
t...@fnal.gov http://home.fnal.gov/~timm/
Fermilab Computing Division, Scientific Computing Facilities,
Grid Facilities Department, FermiGrid Services Group, Assistant Group Leader.
