nv-l
[Top] [All Lists]

RE: [NV-L] Root access

To: "Tivoli NetView Discussions" <nv-l@lists.ca.ibm.com>
Subject: RE: [NV-L] Root access
From: "Evans, Bill" <Bill.Evans@hq.doe.gov>
Date: Fri, 11 May 2007 19:34:23 -0400
Delivery-date: Sat, 12 May 2007 00:35:48 +0100
Envelope-to: nv-l-archive@lists.skills-1st.co.uk
In-reply-to: <OF415F2C6B.AE33EF43-ON852572D8.007C5378-852572D8.007CBB0D@us.ibm.com>
List-help: <mailto:nv-l-request@lists.ca.ibm.com?subject=help>
List-id: Tivoli NetView Discussions <nv-l.lists.ca.ibm.com>
List-post: <mailto:nv-l@lists.ca.ibm.com>
List-subscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=subscribe>
List-unsubscribe: <http://lists.ca.ibm.com/mailman/listinfo/nv-l>, <mailto:nv-l-request@lists.ca.ibm.com?subject=unsubscribe>
References: <9F82FC8565A3544E8B93C63E2CEEB9EB040E46@HQGTNEX3.doe.local> <OF415F2C6B.AE33EF43-ON852572D8.007C5378-852572D8.007CBB0D@us.ibm.com>
Reply-to: Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>
Sender: nv-l-bounces@lists.ca.ibm.com
Thread-index: AceUHhehBPNpTsnpRMORaIYO/OAjaAABeyeA
Thread-topic: [NV-L] Root access
OK, the missing third leg is that  "sudo bash" (not just plain sudo) on Linux does me quite well at putting me in a shell as root.  "su -"  and "sudo su -" do  the same thing.  Sorry for the sloppy detail. Thanks for the correction Leslie.  
 
Bill


From: nv-l-bounces@lists.ca.ibm.com [mailto:nv-l-bounces@lists.ca.ibm.com] On Behalf Of Leslie Clark
Sent: Friday, May 11, 2007 6:43 PM
To: Tivoli NetView Discussions
Subject: RE: [NV-L] Root access


Dave, if you can
   su -
or
   sudo su -
then you are ok.  You are as root as you need to be.

If you try to administer Netview with sudo in front of every command, however, you can usually get away with it on AIX, but on Linux you will have problems due to important libraries being dropped by the sudo command.  But once you are in a shell as root, you are alright.

Cordially,

Leslie A. Clark
IT Services Specialist, Network Mgmt
Information Technology Services Americas
IBM Global Services
(248) 552-4968 Voicemail, Fax, Pager



"Evans, Bill" <Bill.Evans@hq.doe.gov>
Sent by: nv-l-bounces@lists.ca.ibm.com

05/11/2007 05:02 PM
Please respond to
Tivoli NetView Discussions <nv-l@lists.ca.ibm.com>

To
"Tivoli NetView Discussions" <nv-l@lists.ca.ibm.com>
cc
Subject
RE: [NV-L] Root access





I don't think there is a technical explanation or a problem.  It's just some fuzzy wording left over from long ago when only "root" had "root" authority.  It's been a couple months since we put a test instance of NV 7.1.5 in place on RH 4 and my memory may not be working well, but as I remember it ...
 
The character string "root" is meaningless.  The authority is the key.  I log into the system where NetView will reside with my normal user connection then so a SUDO to get administrator (root) authority, change directory to where I've copied my media from the disks  ( /usr/NV_media/NV-Base-715/BASE_CD/NetView) and proceed to issue the "./instalnv -k SERVER [-u] [-q]" command.  
 
"Real soon now" we'll be putting 7.1.5 into production.  It's been working well on the test machine.  Our system support group is busily removing unused packages and tying up security threads on the RH 4 install so we can proceed.  
 
Bill Evans


From: nv-l-bounces@lists.ca.ibm.com [mailto:nv-l-bounces@lists.ca.ibm.com] On Behalf Of REAMD@nationwide.com
Sent:
Friday, May 11, 2007 10:08 AM
To:
Tivoli NetView Discussions
Subject:
[NV-L] Root access



Hi All,

      Can someone please provide me a technical explanation as to why you need to be logged on as 'root' to install Netview?  I currently have a new Solaris 10 box that Im going to load Netview 7.1.5 on and my Unix team does not want to give me the root password. They have given me 'sudo root' and with sudo you already have the same level of access as the Unix Systems Administrators and can grab a root shell as needed.  The only location the root user can log into a server is on the serial console.  Ssh into the server as root and running the su command will not work per the ITRM Unix security template.  


Thanks, Dave
_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to internal IBM'ers only)

_______________________________________________
NV-L mailing list
NV-L@lists.ca.ibm.com
Unsubscribe:NV-L-leave@lists.ca.ibm.com
http://lists.ca.ibm.com/mailman/listinfo/nv-l (Browser access limited to 
internal IBM'ers only)
<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web