For xcat to grab the user, you have to run setup_local_user.sh username
Should be in /opt/xcat/share/scripts I think.
It will automate putting the right certificate into home directory.
Sorry if I got a detail wrong, doing this from my phone off to of my head.
-Written on my mobile device
On Fri, Mar 24, 2017 at 5:15 PM -0400, "Mark Potter"
<mpot...@pcpcdirect.com<mailto:mpot...@pcpcdirect.com>> wrote:
I am attempting to use lsdef in some scripts and having some issues.
I've currently allowed all users on 'localhost' to have access to lsdef
so I'll be using rpower in my examples. The users are all on the xCAT
MN which sees itself as 'localhost' for the purposes of commands. Here
are the relevant lines from the policy table:
"6","pmpo002",,"rpower",,,,"allow",,
"6.1",,"localhost","rpower",,,,"allow",,"1"
[pmpo002@phoebe ~]$ rpower node01
Error: Permission denied for request
[pmpo002@phoebe ~]$
xCAT log:
Mar 24 16:40:12 phoebe xcat[52676]: Request matched no policy rule:
peername=, peerhost=localhost rpower
Mar 24 16:40:12 phoebe xcat[52676]: Permission denied for request:
peername=, peerhost=localhost,peerfqdn=localhost,peerport=42264
command= rpower
--------
"6","pmpo002",,"rpower",,,,"allow",,"1"
"6.1",,"localhost","rpower",,,,"allow",,
[pmpo002@phoebe ~]$ rpower node01 status
node01: on
[pmpo002@phoebe ~]$
xCAT log:
Mar 24 16:41:54 phoebe xcat[38897]: xCAT: Allowing rpower to node01
status from localhost
I went through the xCAT libraries and scripts but I am admittedly not
that great at Perl so I got lost very quickly. It's obvious that xCAT
isn't grabbing the username at some point but I honestly can't figure
out where or why. Any help would be greatly appreciated.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
