Configuring sudo users in isilon

[avinash patil]

I am looking for correct procedure to configure sudo users on a new Isilon (Onefs 9.2 ).

We want to stop our admins from using the "root" account. Not finding any KB in Dell site.

[Robin Meeker]

You can find the sudoers file in /etc/mcp/override/sudoers. It’s a pretty standard file and you can edit it like any other BSD/Linux host.

Files in /etc/mcp/override or /etc/mcp/templates will automagically be applied to all nodes in a cluster.

Thanks,

Robin Meeker

She/Her
DevOps Engineer
ICPSR, University of Michigan

On Aug 5, 2022, at 8:38 AM, avinash patil <avinash...@gmail.com> wrote:

I am looking for correct procedure to configure sudo users on a new Isilon (Onefs 9.2 ).

We want to stop our admins from using the "root" account. Not finding any KB in Dell site.

--
You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/56823c3e-d5ec-4955-a210-a91d5370ecb2n%40googlegroups.com.

[Robin Meeker]

Oh, and see also the Security Guide relating to the “isi auth roles” commands for setting up good RBAC and best practices on the isilon CLI commands and configuring web ui permissions.

https://www.dell.com/support/kbdoc/en-us/000185961/onefs-9-2-0-0-documentation-info-hub

Thanks,

Robin Meeker

She/Her
DevOps Engineer
ICPSR, University of Michigan

On Aug 5, 2022, at 8:38 AM, avinash patil <avinash...@gmail.com> wrote:

I am looking for correct procedure to configure sudo users on a new Isilon (Onefs 9.2 ).

We want to stop our admins from using the "root" account. Not finding any KB in Dell site.

[John Beranek - PA]

If you run "isi_visudo" as root, it will safely edit /etc/mcp/override/sudoers and thereby manage sudo rules across the cluster.

John

[Jerry]

I would wonder if this is in any of the ansible modules?

https://github.com/dell/ansible-powerscale

I couldn't find it at first glance.

--

You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/5df96099-396d-457a-af99-443f70fb007cn%40googlegroups.com.