Re: [Networker] User/Group for NMC?
2009-10-19 08:09:08
Typically, if one is running an apache web server, the user "apache" is created
and runs the web server. In this case, they are recommending nobody:nobody.
Personally, I wouldn't use this suggestion. I'd create a user/group
specifically for running the web service. Then you "know" what that account
can and cannot do at all times.
I don't recall if this recommendation was made when NMC was first released. I
know I'm using defaults myself. Having said that, I will most likely look into
changing the situation.
Patti Clark
Sr. Linux System Administrator
DOE/OSTI
> -----Original Message-----
> From: EMC NetWorker discussion
> [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On Behalf Of George Sinclair
> Sent: Thursday, October 15, 2009 6:52 PM
> To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
> Subject: [Networker] User/Group for NMC?
>
> We're preparing to install the NMC software. This will be
> installed on
> the primary backup server. The installation documentation mentions:
>
> "Specify a User/Group with limited privileges that NMC will
> use to run
> the web server. This must be a non-root user. For example, Linux
> operating systems have a default user/group [nobody/nobody]
> that can be
> used."
>
> Any recommendations or warnings about this?
>
> Just make up any user/group name combination that doesn't
> already exist
> and add to /etc/passwd and group files? What about NIS? Does
> that matter?
>
> Thanks.
>
> --
> George Sinclair
> Voice: (301) 713-3284 x210
> - The preceding message is personal and does not reflect any
> official or
> unofficial position of the United States Department of Commerce -
> - Any opinions expressed in this message are NOT those of the
> US Govt. -
>
> To sign off this list, send email to
> listserv AT listserv.temple DOT edu and type "signoff networker" in
> the body of the email. Please write to
> networker-request AT listserv.temple DOT edu if you have any
> problems with this list. You can access the archives at
> http://listserv.temple.edu/archives/networker.html or
> via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
>
To sign off this list, send email to listserv AT listserv.temple DOT edu and
type "signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems with this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
|
|
|