calvop

updated

7 years ago

C

calvop

5 Posts

0

2529

November 28th, 2019 04:00

Sudo on avamar

Hi community, I'm trying to use sudo to avoid granting admin and root password to operators team, they need to do some checks from SO side.
Sudo allows us flexibility like this.

avoperator@ave-04:~/#: sudo mccli client show
0,23000,CLI command completed successfully.

avoperator@ave-04:~/#: sudo mccli client delete
avoperator's password:
Sorry, user avoperator is not allowed to execute '/usr/local/avamar/bin/mccli client delete' as root on ave-04.


Now operator called "avoperator" has some new commands available after adding there lines in /etc/suders.
# Extend permissions to avoperator group
%avoperator ALL=(root) NOPASSWD: /usr/local/avamar/bin/mccli * show, /usr/local/avamar/bin/dpnctl status, /usr/local/avamar/bin/status.dpn

There are no official avamar doc related to this config. Do you know if it is a config "blessed" by support?