Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: How to handle build user access/permissions?
Top Forums UNIX for Advanced & Expert Users How to handle build user access/permissions? Post 303013099 by hburnswell on Thursday 15th of February 2018 01:16:40 AM
Old 02-15-2018
@bakunin and @Peasant thank you for your replies and suggestions. My apologies for not updating this thread sooner.

What I have ended up doing is:

Created an RSA key and put it in place on the destination server to allow for passwordless SSH connections from the build server. This gives me the ability to change the password for the 'srv_user' and not have a need to distribute the password.

Created a systemd service for Tomcat so that the processes are always run as 'app_user'. The 'srv_user' connects via ssh, uses sudo to stop Tomcat via the systemd service, does the get of new files, does a build, uses sudo to change permissions back to 'app_user' owner and group, and uses sudo to start Tomcat via systemd service.

So far it seems like the best way to handle the process. I'll be fine tuning it as we progress.

Any thoughts and/or suggestions are welcome.

Thanks,

HB
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

root access on sun os and permissions

Currently have root access to our own boxes on site. HQ wants to take root access away from us. What does root access provide that is unavailable for users as it is essential for us to keep local control. We log in as users but have su for special needs. On all other os boxes we have admin... (2 Replies)
Discussion started by: allinone
2 Replies

2. AIX

Strange error with file access permissions

All, I am trying to copy some data from /admin/reports/Sept/ccn/c_ivsstr01 to /home/users/myhomedir and I am getting an error I have never seen before: The file access permissions do not allow the specified action. The permissions on the file are -rw-r--r-- and I am the owner of the file... (3 Replies)
Discussion started by: kjbaumann
3 Replies

3. UNIX for Dummies Questions & Answers

Side-Effect of write access permissions for a subdirectory

Hi Unix Gurus, I'm a newbie to unix and need some help from you. I'm going to give full access (777) to a subdirectory to an FTP account. Let's say the subdirectory is /usr/local/dir1/dir2/dir3 There are files in dir1, say a.txt b.cfg c.xml Will this account be able to access... (3 Replies)
Discussion started by: xinu299
3 Replies

4. UNIX for Dummies Questions & Answers

Setting permissions and restricting access

Hi all, I have user called "Z". The home directory is /home/Z. I have another directory /home/Z/OP. Within /home/Z/OP, i have 2 directories /home/Z/OP/OP1 and /home/Z/OP2. I want to restrict access for Z to only access /home/Z/OP and /home/Z/OP1 and /home/Z/OP2. What kind of... (4 Replies)
Discussion started by: new2ss
4 Replies

5. Shell Programming and Scripting

script to change the access permissions of the files

Hi, I want to change the access permissions of the files whose extension is same.For example *.c but these are inside a directory and inside that other directory is there and it contains the .c files..for example-- So my aim is to search the files under src and change the access permissions... (3 Replies)
Discussion started by: smartgupta
3 Replies

6. Solaris

user permissions

hi i want to display the usernames,usergroups user permissions and user home directory's with in a single command.and possibities are their for getting this output .. (9 Replies)
Discussion started by: tv.praveenkumar
9 Replies

7. UNIX for Advanced & Expert Users

file access permissions

Hi everybody, following is the scenario; OS HP UX 11.23 two users: # id bodi uid=109(bodi) gid=20(users) groups=1(other),2(bin),3(sys),106(oinstall) # id ossmed uid=121(ossmed) gid=20(users) umask 077 directory name /home/mydir directory permissions drwxrwxrwx requirement: to... (1 Reply)
Discussion started by: ajays
1 Replies

8. OS X (Apple)

Change access permissions

I purchased a 2TB hard drive, split it into two partitions, and formatted it as NTFS. I want to use the drive on my pc and my mac. How can I change the access permissions so Mac OS 10.4.11 will let me write to the drive? I tried this: $ chmod +a "admin allow write" /volumes/V2_Mac chmod:... (3 Replies)
Discussion started by: Me&MyMac
3 Replies

9. Linux

Permissions and access to data

Hi Operating system Red Hat Enterprise 5.8, Data access Mac/PC environment on various OS levels. Access via smb I am trying to set up a data shared area where a user group can read and write to its own directory, but can only write to another groups directory. Example: I have set up two... (1 Reply)
Discussion started by: treds
1 Replies

10. UNIX for Dummies Questions & Answers

Access permissions chmod 606

Hi All I am running Ubuntu linux flavour. I need provide multiple users belonging to the same group access to a dir where they can write files but are not supposed to remove or rename files. users outside the group should be able to read and write to the dir. i have set the permission of... (7 Replies)
Discussion started by: Simza
7 Replies

LEARN ABOUT POSIX

systemd-ask-password-console.service

SYSTEMD-ASK-PASSWORD-CONSOLE.SERVICE(8) 	       systemd-ask-password-console.service		   SYSTEMD-ASK-PASSWORD-CONSOLE.SERVICE(8)

NAME

       systemd-ask-password-console.service, systemd-ask-password-console.path, systemd-ask-password-wall.service, systemd-ask-password-wall.path
       - Query the user for system passwords on the console and via wall

SYNOPSIS

       systemd-ask-password-console.service

       systemd-ask-password-console.path

       systemd-ask-password-wall.service

       systemd-ask-password-wall.path

DESCRIPTION

       systemd-ask-password-console.service is a system service that queries the user for system passwords (such as hard disk encryption keys and
       SSL certificate passphrases) on the console. It is intended to be used during boot to ensure proper handling of passwords necessary for
       boot.  systemd-ask-password-wall.service is a system service that informs all logged in users for system passwords via wall(1). It is
       intended to be used after boot to ensure that users are properly notified.

       See the developer documentation[1] for more information about the system password logic.

       Note that these services invoke systemd-tty-ask-password-agent(1) with either the --watch --console or --watch --wall command line
       parameters.

SEE ALSO

       systemd(1), systemd-tty-ask-password-agent(1), wall(1)

NOTES

	1. developer documentation
	   https://www.freedesktop.org/wiki/Software/systemd/PasswordAgents

systemd 237												   SYSTEMD-ASK-PASSWORD-CONSOLE.SERVICE(8)
All times are GMT -4. The time now is 01:47 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy