Hi,

On Mon, Apr 04, 2011 at 05:51:28PM +0300, Pavlos Polianidis wrote:
> I know that this is wrong but I found a workaround :)
> 
> If you login as a user, which is a member of haclient group, without loading 
> its profile (su TEST instead su - TEST), and all users in haclient group have 
> the permission to write into /var/lib/heartbeat/crm then you can run the crm 
> command and even change the configuration :)

Sourcing a profile shouldn't have nothing to do with this. What
probably happens is that PATH is reset and it doesn't contain
/usr/sbin anymore. If you put /usr/sbin into the PATH for this
user it should work.

Thanks,

Dejan

> Dear Dejan
> 
> The versions I have used are:
> 
> 
> pacemaker-1.0.10-1.4.el5
> cluster-glue-1.0.6-1.6.el5
> 
> 
> below are the actions I took:
> 
> 
> crm(live)options# user TEST
> crm(live)options# save
> crm(live)options# show
> editor "vim"
> pager "less"
> user "TEST"
> skill-level "expert"
> output "color"
> colorscheme "yellow,normal,cyan,red,green,magenta"
> sort-elements "yes"
> check-frequency "always"
> check-mode "strict"
> crm(live)options# Ctrl-C, leaving
> [root@lsc-node01 ~]# su - TEST
> [TEST@lsc-node01 ~]$ crm
> -bash: crm: command not found
> [TEST@lsc-node01 ~]$ /usr/sbin/crm
> cibadmin not available, check your installation
> 
> 
> 
> 
> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On Behalf Of Dejan Muhamedagic
> Sent: Monday, April 04, 2011 4:08 PM
> To: General Linux-HA mailing list
> Subject: Re: [Linux-HA] op monition on-fail option
> 
> On Mon, Apr 04, 2011 at 03:58:06PM +0300, Pavlos Polianidis wrote:
> > Thank for the respond.
> > 
> > What I did is in order to run the crm_resource command as a user (let's say 
> > TEST) I added the user "TEST" to the haclient group. But the command "crm" 
> > is refuses to run as TEST. I will try to add a specific command to sudoers 
> > and see if it works
> 
> That shouldn't be happening. In which way does it "refuse" to
> run? Which version of Pacemaker and cluster-glue do you have
> installed.
> 
> Thanks,
> 
> Dejan
> 
> > 
> > Kind regards,
> > 
> > Pavlos Polianidis | Technical Support Specialist
> > 
> > Velti
> > 44 Kifisias Ave.
> > 15125 Marousi, Athens, Greece
> > T   +30.210.637.8000
> > F   +30.210.637.8888
> > M   +30.695.506.0133
> > E   [email protected]
> > www.velti.com
> > 
> > Velti is a global leader in mobile marketing and advertising solutions for 
> > mobile operators, ad agencies, brands and media groups.
> > San Francisco | New York | Boston | Dublin | London | Paris | Madrid | 
> > Athens | Sofia | Moscow | Dubai | New Delhi | Mumbai | Jakarta | Beijing | 
> > Shanghai | Sydney
> > 
> > 
> > -----Original Message-----
> > From: [email protected] 
> > [mailto:[email protected]] On Behalf Of Dejan Muhamedagic
> > Sent: Monday, April 04, 2011 3:51 PM
> > To: General Linux-HA mailing list
> > Subject: Re: [Linux-HA] op monition on-fail option
> > 
> > Hi,
> > 
> > On Tue, Mar 22, 2011 at 06:39:08PM +0200, Pavlos Polianidis wrote:
> > > Dear all,
> > >
> > > I am looking for a way to add/modify an op-option "op monitor 
> > > on-fail="restart"" through a single command besides using the crm cli. I 
> > > tried with crm_resource but no luck. I need the command to use it in a 
> > > script as a non-root user, that's why I cannot use a command such as "crm 
> > > configure .........". Is there a way to do that?
> > 
> > A non-root user? Which one? Do you then use sudo in your script?
> > If so, you can set the "user" option in crm (see "crm options
> > help user"). Now, it's going to be tricky to do what you want
> > from a script. Take a look here
> > http://marc.info/?l=linux-ha&m=130148966631607&w=2
> > 
> > Thanks,
> > 
> > Dejan
> > 
> > >
> > > Thanks in advance
> > >
> > > Pavlos Polianidis | Technical Support Specialist
> > >
> > > Velti
> > > 44 Kifisias Ave.
> > > 15125 Marousi, Athens, Greece
> > > T   +30.210.637.8000
> > > F   +30.210.637.8888
> > > M  +30.695.506.0133
> > > E   [email protected]
> > > www.velti.com<http://www.velti.com>
> > >
> > > Velti is a global leader in mobile marketing and advertising solutions 
> > > for mobile operators, ad agencies, brands and media groups.
> > > San Francisco | New York | Boston | Dublin | London | Paris | Madrid | 
> > > Athens | Sofia | Moscow | Dubai | New Delhi | Mumbai | Jakarta | Beijing 
> > > | Shanghai | Sydney
> > >
> > > _______________________________________________
> > > Linux-HA mailing list
> > > [email protected]
> > > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> > > See also: http://linux-ha.org/ReportingProblems
> > _______________________________________________
> > Linux-HA mailing list
> > [email protected]
> > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> > See also: http://linux-ha.org/ReportingProblems
> > _______________________________________________
> > Linux-HA mailing list
> > [email protected]
> > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> > See also: http://linux-ha.org/ReportingProblems
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
> _______________________________________________
> Linux-HA mailing list
> [email protected]
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to