Re: [ClusterLabs] PCS ACL for the "pcs cluster stop" command

2023-10-16 Thread Miroslav Lisik
On 10/16/23 12:16, Klaus Wenninger wrote: On Fri, Oct 13, 2023 at 9:21 PM Reid Wahl > wrote: On Fri, Oct 13, 2023 at 12:19 PM Reid Wahl mailto:nw...@redhat.com>> wrote: > > On Fri, Oct 13, 2023 at 9:56 AM Roberto Rodrigos

Re: [ClusterLabs] PCS ACL for the "pcs cluster stop" command

2023-10-16 Thread Miroslav Lisik
Hi Roberto! On 10/13/23 10:13, Roberto Rodrigos wrote: good day! I use the configuration to create an ACL, it is shown below. How can I restrict access to the "pcs cluster stop" command for a user? There is way to restrict access to the `pcs cluster stop` command but you need to change

Re: [ClusterLabs] PCS ACL for the "pcs cluster stop" command

2023-10-16 Thread Klaus Wenninger
On Fri, Oct 13, 2023 at 9:21 PM Reid Wahl wrote: > On Fri, Oct 13, 2023 at 12:19 PM Reid Wahl wrote: > > > > On Fri, Oct 13, 2023 at 9:56 AM Roberto Rodrigos > wrote: > > > > > > good day! > > > I use the configuration to create an ACL, it is shown below. How can I > restrict access to the

Re: [ClusterLabs] PCS ACL for the "pcs cluster stop" command

2023-10-13 Thread Reid Wahl
On Fri, Oct 13, 2023 at 12:19 PM Reid Wahl wrote: > > On Fri, Oct 13, 2023 at 9:56 AM Roberto Rodrigos wrote: > > > > good day! > > I use the configuration to create an ACL, it is shown below. How can I > > restrict access to the "pcs cluster stop" command for a user? > > I don't think you can.

Re: [ClusterLabs] PCS ACL for the "pcs cluster stop" command

2023-10-13 Thread Reid Wahl
On Fri, Oct 13, 2023 at 9:56 AM Roberto Rodrigos wrote: > > good day! > I use the configuration to create an ACL, it is shown below. How can I > restrict access to the "pcs cluster stop" command for a user? I don't think you can. ACLs are implemented in Pacemaker; pcs simply provides an

[ClusterLabs] PCS ACL for the "pcs cluster stop" command

2023-10-13 Thread Roberto Rodrigos
good day! I use the configuration to create an ACL, it is shown below. How can I restrict access to the "pcs cluster stop" command for a user? useradd rouser -m -G haclient useradd rwuser -m -G haclient passwd rwuser passwd rouser pcs acl enable pcs acl role create read-only description="Read