blate
08-08-2011, 06:05 PM
We keep running into the following problem: Users really need to be able to use UNIX command-line tools in conjunction with 3t commands (such as 3t class get_desc/ modify descriptor/ 3t class put_desc; or executing a number of commands in a loop, like 'for app in APP1 APP2 ... ; do 3t app stop ${app}; done'.
I know how to give a user root shell access. But I don't want these users having root on the grid controller. It also appears that 3t/3tshell do not function properly non-root users.
I also fundamentally dislike having all users log in as root -- it makes it hard to see who is doing what on the CLI.
Would sudo suffice?
How have you (the reader) addressed this problem in your environment, as applicable?
I know how to give a user root shell access. But I don't want these users having root on the grid controller. It also appears that 3t/3tshell do not function properly non-root users.
I also fundamentally dislike having all users log in as root -- it makes it hard to see who is doing what on the CLI.
Would sudo suffice?
How have you (the reader) addressed this problem in your environment, as applicable?