I know that this is wrong but I found a workaround :)

If you login as a user, which is a member of haclient group, without loading 
its profile (su TEST instead su - TEST), and all users in haclient group have 
the permission to write into /var/lib/heartbeat/crm then you can run the crm 
command and even change the configuration :)


Kind regards, 

-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Pavlos Polianidis
Sent: Monday, April 04, 2011 5:38 PM
To: General Linux-HA mailing list
Subject: Re: [Linux-HA] op monition on-fail option

Dear Dejan

The versions I have used are:


pacemaker-1.0.10-1.4.el5
cluster-glue-1.0.6-1.6.el5


below are the actions I took:


crm(live)options# user TEST
crm(live)options# save
crm(live)options# show
editor "vim"
pager "less"
user "TEST"
skill-level "expert"
output "color"
colorscheme "yellow,normal,cyan,red,green,magenta"
sort-elements "yes"
check-frequency "always"
check-mode "strict"
crm(live)options# Ctrl-C, leaving
[root@lsc-node01 ~]# su - TEST
[TEST@lsc-node01 ~]$ crm
-bash: crm: command not found
[TEST@lsc-node01 ~]$ /usr/sbin/crm
cibadmin not available, check your installation




-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of Dejan Muhamedagic
Sent: Monday, April 04, 2011 4:08 PM
To: General Linux-HA mailing list
Subject: Re: [Linux-HA] op monition on-fail option

On Mon, Apr 04, 2011 at 03:58:06PM +0300, Pavlos Polianidis wrote:
> Thank for the respond.
> 
> What I did is in order to run the crm_resource command as a user (let's say 
> TEST) I added the user "TEST" to the haclient group. But the command "crm" is 
> refuses to run as TEST. I will try to add a specific command to sudoers and 
> see if it works

That shouldn't be happening. In which way does it "refuse" to
run? Which version of Pacemaker and cluster-glue do you have
installed.

Thanks,

Dejan

> 
> Kind regards,
> 
> Pavlos Polianidis | Technical Support Specialist
> 
> Velti
> 44 Kifisias Ave.
> 15125 Marousi, Athens, Greece
> T   +30.210.637.8000
> F   +30.210.637.8888
> M   +30.695.506.0133
> E   [email protected]
> www.velti.com
> 
> Velti is a global leader in mobile marketing and advertising solutions for 
> mobile operators, ad agencies, brands and media groups.
> San Francisco | New York | Boston | Dublin | London | Paris | Madrid | Athens 
> | Sofia | Moscow | Dubai | New Delhi | Mumbai | Jakarta | Beijing | Shanghai 
> | Sydney
> 
> 
> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On Behalf Of Dejan Muhamedagic
> Sent: Monday, April 04, 2011 3:51 PM
> To: General Linux-HA mailing list
> Subject: Re: [Linux-HA] op monition on-fail option
> 
> Hi,
> 
> On Tue, Mar 22, 2011 at 06:39:08PM +0200, Pavlos Polianidis wrote:
> > Dear all,
> >
> > I am looking for a way to add/modify an op-option "op monitor 
> > on-fail="restart"" through a single command besides using the crm cli. I 
> > tried with crm_resource but no luck. I need the command to use it in a 
> > script as a non-root user, that's why I cannot use a command such as "crm 
> > configure .........". Is there a way to do that?
> 
> A non-root user? Which one? Do you then use sudo in your script?
> If so, you can set the "user" option in crm (see "crm options
> help user"). Now, it's going to be tricky to do what you want
> from a script. Take a look here
> http://marc.info/?l=linux-ha&m=130148966631607&w=2
> 
> Thanks,
> 
> Dejan
> 
> >
> > Thanks in advance
> >
> > Pavlos Polianidis | Technical Support Specialist
> >
> > Velti
> > 44 Kifisias Ave.
> > 15125 Marousi, Athens, Greece
> > T   +30.210.637.8000
> > F   +30.210.637.8888
> > M  +30.695.506.0133
> > E   [email protected]
> > www.velti.com<http://www.velti.com>
> >
> > Velti is a global leader in mobile marketing and advertising solutions for 
> > mobile operators, ad agencies, brands and media groups.
> > San Francisco | New York | Boston | Dublin | London | Paris | Madrid | 
> > Athens | Sofia | Moscow | Dubai | New Delhi | Mumbai | Jakarta | Beijing | 
> > Shanghai | Sydney
> >
> > _______________________________________________
> > Linux-HA mailing list
> > [email protected]
> > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> > See also: http://linux-ha.org/ReportingProblems
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to