>>> Dejan Muhamedagic <[email protected]> schrieb am 04.04.2011 um 14:51 in
Nachricht <20110404125103.GK3553@squib>:
> Hi,
> 
> On Tue, Mar 22, 2011 at 06:39:08PM +0200, Pavlos Polianidis wrote:
> > Dear all,
> > 
> > I am looking for a way to add/modify an op-option "op monitor 
> on-fail="restart"" through a single command besides using the crm cli. I 
> tried with crm_resource but no luck. I need the command to use it in a script 
> as a non-root user, that's why I cannot use a command such as "crm configure 
> .........". Is there a way to do that?
> 
> A non-root user? Which one? Do you then use sudo in your script?
> If so, you can set the "user" option in crm (see "crm options
> help user"). Now, it's going to be tricky to do what you want
> from a script. Take a look here
> http://marc.info/?l=linux-ha&m=130148966631607&w=2 

Hi!

Once again: HP Serviceguard has three roles for users to delegate some tasks:
MONITOR: read-only capabilities for the cluster
PACKAGE_ADMIN: MONITOR, plus administrative commands for packages (=resource 
groups)
FULL_ADMIN: MONITOR and PACKAGE_ADMIN plus the administrative commands for the 
cluster.

I think it would make sense to be able to allow users to disable/enable some 
resources. That might be even more secure than the sudo approach.

Regards,
Ulrich


_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to