Sounds like a job for pfexec and a role...
On 10/23/2014 04:56 PM, Mark Creamer via smartos-discuss wrote:
I have a script that one of our developers uses to run a backup job
from cron. It uses public key auth to log in to the remote box so it
doesn't prompt for password.
Now he wants to add a step whereby within the script, it will su to
another user (service account) and run a different command, but of
course it prompts for that user's password.
How can I allow "su - otheruser" without a password prompt, similar to
how root can always su to another account?
Thanks,
--
Mark
*smartos-discuss* | Archives
<https://www.listbox.com/member/archive/184463/=now>
<https://www.listbox.com/member/archive/rss/184463/22280019-340ab187>
| Modify
<https://www.listbox.com/member/?&>
Your Subscription [Powered by Listbox] <http://www.listbox.com>
-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription:
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com