How do I give Java developers access to Solaris server Post: 302186110

Sponsored Content

Top Forums UNIX for Dummies Questions & Answers How do I give Java developers access to Solaris server Post 302186110 by csaunders on Wednesday 16th of April 2008 01:41:36 PM

04-16-2008

Registered User

Quote:

Originally Posted by gsander

Some of it does make sense and it does help. I asked about the java they are using. they are using Sun One web server - actually building a web app for it. They want to deploy the application to the web server. I have created an account for them to use already. It is a member of the root group. That might be more than they need but this is the test server. I want to be more restrictive on production. Sudo might be the answer but I will need to read up on it a good bit. Should the developers use the same account that the web server runs under?

I would strongly suggest taking the sunone account out of the root group. Not only is it dangerous from a security point of view, one of the devs, could really muck things up.

developers should login as themselves, then "sudo" to the sun one account.

The sooner you start using security best practices the less pain it will be to convince developers and management why you should go this route. Enforce now and it will be easier on you. here is an example of the sudo configuration file, create a group for admins called envmqmt or whatever you like, create a group called dev and place all devs usernames in that group, then configure sudo as below(sudosh is another program that can track all user commands, it is used in conjunction with sudo)

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#
# sudoers file TE 19JUL
# edit: TE 19JUL07
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification
User_Alias STAFF=%envmgt
User_Alias DEV=%dev

# Cmnd alias specification

# User privilege specification
root ALL=(ALL) ALL
STAFF ALL = NOPASSWD: /usr/bin/su - , /usr/local/bin/sudosh
DEV ALL = NOPASSWD: /usr/bin/su - sunone, /usr/local/bin/sudosh

csaunders

View Public Profile for csaunders

Find all posts by csaunders

7 More Discussions You Might Find Interesting

1. Solaris

Sun Java Portal Server 6 and Solaris 10

Hello, I have recently installed Solaris 10 OE in an Ultra-10 stand alone workstation. I would like to know where can I find information regarding which version of Sun Web technologies such as: Sun Java Portal 6.x Sun Java Web Server 6.x Sun Java Identity Server Sun Java Directory...

2. UNIX for Dummies Questions & Answers

Possible to give sudo access to subdirectories?

Say I want to give someone access to /example/directory/* where * equals all the sub directories inside of /example/directory I tried doing something like joe DEV1=(ROOT) /example/directory/ But that doesn't seem to want to work. If I give him the full subdirectory...

3. Solaris

Give Solaris server documentation

If you have documents of preconfigured Solaris server with all tuned improvements.. This is all about how it is released, as first example. It must contain ready instructions to setup server from scratch in a case of global system crash mb some FS tunings (i.e. log fs, var fs) mb some ready...

4. UNIX for Advanced & Expert Users

Access to particular IP's from the solaris/LINUX server

Hi All, I have a scenario here where in I need to allow a user from the server(Solaris or LINUX) to be able to ssh to a particular set of IP's. Eg:user1 should be able to access IP's 10.26.32.2,10.26.32.7,10.26.32.9 user2 should be able to access IP's 10.1.1.2,10.1.1.4(just an example) ...

5. SCO

how to give Telnet access

Hello, I have recently taken over administration of a Sco Unixware server (Version 7.1.4), but have no previous experience with Unix. I now have the following problem: Most computers on the network are unable to Telnet to the Unix server but some PCs with privileged users can, which is...

6. Solaris

Can't access NFS Share on Solaris Server from a Linux Client

Hi, I am trying to access a NFS shared directory on Solaris 10 Server from a client which is RHEL 4 Server. On the NFS Server, in /etc/dfs/, I added following line to dfstab file. & then ran the following On the client machine, while running the mount command, I am...

7. Solaris

How to give sudo access to the personal id's to that of application id in Solaris 10?

Hi, I am using solaris 10. Requirement is I need to give sudo access to the normal id's to the application userid. Example:I have an personal id calle "rzynv5" on the solaris server.I have an application id called "gmdidp".Requirement here is when user logged in as rzynv5 next thing he...

LEARN ABOUT DEBIAN

libglpk-java

libglpk-java(3) 					       libglpk-java overview						   libglpk-java(3)

NAME

       libglpk-java - GNU Linear Programming Kit Java Binding

DESCRIPTION

       The  GNU  Linear  Programming  Kit  (GLPK)  package supplies a solver for large scale linear programming (LP) and mixed integer programming
       (MIP).  The GLPK project is hosted at http://www.gnu.org/software/glpk.

       It has two mailing lists:
       - help-glpk@gnu.org and
       - bug-glpk@gnu.org.

       To subscribe to one of these lists, please, send an empty mail with a Subject: header line of just "subscribe" to the list.

       GLPK provides a library written in C and a standalone solver.  The source code provided at ftp://gnu.ftp.org/gnu/glpk/ contains	the  docu-
       mentation of the library in file doc/glpk.pdf.

       The Java platform provides the Java Native Interface (JNI) to integrate non-Java language libraries into Java applications.

       Project GLPK for Java delivers a Java Binding for GLPK. It is hosted at http://glpk-java.sourceforge.net/.

       To report problems and suggestions concerning GLPK for Java, please, send an email to the author at xypron.glpk@gmx.de.

ARCHITECTURE

       A GLPK for Java application will consist of the following
       - the GLPK library
       - the GLPK for Java JNI library
       - the GLPK for Java class library
       - the application code.

GLPK LIBRARY

       The GLPK library can be compiled from source code. Follow the instructions in file INSTALL provided in the source distribution. Precompiled
       packages are available in many Linux distributions.

       The usual installation path for the library is /usr/local/lib/libglpk.so.  The library has to be in the search path for binaries.

GLPK FOR JAVA JNI LIBRARY

       The GLPK for Java JNI library can be compiled from source code. Follow the instructions in file INSTALL provided in  the  source  distribu-
       tion.

       The  usual installation path for the library is /usr/local/lib/jni/libglpk-java.so.  The library has to be in the search path for binaries.
       Specify the library path upon invocation of the application, e.g.
       java -Djava.library.path=/usr/local/libjni

GLPK FOR JAVA CLASS LIBRARY

       The source code to compile the GLPK for Java class library is provided at http://glpk-java.sourceforge.net.

       The GLPK for Java class library can be compiled from source code. Follow the instructions in file INSTALL provided in the source  distribu-
       tion.  The usual installation path for the library is /usr/local/share/java/glpk-java.jar.

       The library has to be in the CLASSPATH. Specify the classpath upon invocation of the application, e.g.
       java -classpath /usr/local/share/java/glpk-java.jar;.

SEE ALSO

       Further documentation and examples can be found in the documentation path, which defaults to /usr/local/share/doc/libglpk-java.

version 1.0.18						       September 10th, 2011						   libglpk-java(3)