Re: [OpenIndiana-discuss] Backup User for zfs send and receive

2012-09-04 Thread James Carlson
Flo wrote: Hi, I must confess, that I never used pfexec. If an user has that permission to use commands with pfexec, do I need to enter a password? No. How can I give a user the permission ZFS File System Management without a GUI? Edit /etc/user_attr and add it to the profiles= for that

Re: [OpenIndiana-discuss] Backup User for zfs send and receive

2012-09-03 Thread Flo
Hi, I must confess, that I never used pfexec. If an user has that permission to use commands with pfexec, do I need to enter a password? How can I give a user the permission ZFS File System Management without a GUI? FLorian On 09/03/2012 01:05 AM, Timothy Coalson wrote: We used different

[OpenIndiana-discuss] Backup User for zfs send and receive

2012-09-02 Thread Florian
Hello, I want to create a user to do a backup of my OI Server. I created it with: useradd -m -d /home/backup -s /bin/bash backup then: zfs allow -s @adminrole create,destroy,snapshot,rollback,clone,promote,rename,mount,send,receive,quota,reservation tank zfs allow backup @adminrole tank

Re: [OpenIndiana-discuss] Backup User for zfs send and receive

2012-09-02 Thread Timothy Coalson
Well, when I set something similar up, I added the ZFS File System Management profile to the user with the users-admin GUI, and used pfexec zfs receive ... for the receive command. As I understand it, it means that it is allowed to run zfs with root privileges, so it wouldn't be limited to one

Re: [OpenIndiana-discuss] Backup User for zfs send and receive

2012-09-02 Thread Jan Owoc
I don't actually know how this is supposed to work, but I noticed a difference between what you two wrote: On Sun, Sep 2, 2012 at 6:03 AM, Florian flor...@acw.at wrote: I used this command: zfs send -R tank/raid1-0@20120831-2017 | ssh backup@192.168.10.201/usr/sbin/zfs receive -Fduv

Re: [OpenIndiana-discuss] Backup User for zfs send and receive

2012-09-02 Thread Timothy Coalson
We used different methods, the user profiles just tell pfexec what the user can run as root, you still need to call it with pfexec in order to run it as root. His method gave some privileges to a particular user on a particular pool/filesystem, so that he didn't need root privileges to do the zfs