* Brian Cuttler ([EMAIL PROTECTED]) [20010702 14:14] thus spake:
> 
> I should probably also say that I'm re-building amanda 2.4.2p2
> on IRIX 6.5.x (usually 6.5.7m and up, currently installing
> 6.5.12m on some systems).

I have amanda running as a client on 6.5.11 and 6.5.12 and I used the
following to configure it:

./configure --prefix=/opt/amanda \
--mandir=/usr/local/man \
--with-user=amanda  \
--with-group=sys  \
--with-configdir=/opt/amanda/etc/amanda  \
--with-tape-device=<your_tape_device> \
--with-config=<your_config> \
--with-tape-server=<your_tape_server> \
--with-index-server=<your_index_server>

The amanda user 'amanda' has an entry in /etc/passwd:

amanda:*LK*:666:2:Amanda:/opt/amanda:/bin/sh

Just make sure that the group chosen has the proper
read permissions on the disk devices to be backed up
by amanda by creating /etc/ioperms (man ioconfig)

In this case, /etc/ioperms for this client:

/hw/rdsk/dks0d1s0 0640 root sys
/hw/rdsk/dks0d2s0 0640 root sys
/hw/rdsk/dks0d2s6 0640 root sys 

HTH,
jf

> 
> > 
> > Hello Amanda Group,
> > 
> > I'm trying to tighten security and build amanda as a non-root user.
> > 
> > On our Sun systems use used --with-user=bin --with-group-sys
> > and had hoped to do the same for our IRIX clients and servers.
> > (on Irix we are also using --disable-libtool which may no longer
> >  be needed ? ).
> > 
> > The configure, make, make install all run successfully but running
> > the daemon as bin is a problem, system tells me "no shell" which
> > I guess makes sense as the shell in /etc/passwd is /dev/null.
> > 
> > Wondering what is the "correct" solution, choose a different non-root
> > user on SGI ? Run as Root on SGI. Ok to change the shell for bin ?
> > 
> > Please let me know what your experiences are.
> > 
> >                                             thanks,
> > 
> >                                             Brian
> > 
> > ---
> >    Brian R Cuttler                 [EMAIL PROTECTED]
> >    Computer Systems Support        (v) 518 486-1697
> >    Wadsworth Center                (f) 518 473-6384
> >    NYS Department of Health        Help Desk 518 473-0773
> > 

Reply via email to