Re: stop a service as a non root user

[Martin Pala]

You can set specific command for specific user in sudo with NOPASSWD option => 
run it without typing password, just will have to prefix it with sudo and use 
the same command (with path, etc.)

        myuser ALL=NOPASSWD: /usr/bin/monit stop tomcat

To use it, ssh as myuser and type: 

        sudo /usr/bin/monit stop tomcat

... no password needed


Regards,
Martin



On Jul 2, 2013, at 1:02 PM, Nestor Urquiza <address@hidden> wrote:

> Hi Martin,
> 
> That still does not address the user story. If I need to use sudo I must 
> provide a password so I won't be able to 'manage the service the way I would 
> do without monit' which is using the non root user without password.
> 
> Let me give you a test case so you better understand:
> 
> 1. Without monit looking after tomcat in a remote server: Use ssh to stop 
> tomcat remotely. This is easy having the public key stored in remote server. 
> No password will be asked. You can control 10 servers with just one command.
> 2. With monit: Use ssh to stop tomcat. Monit will restart it automatically. 
> If sudo is used a password will need to be provided.
> 
> It would look like a feature is needed: to instruct monit not to monitor if 
> the command is the stop command is used manually. There is such feature to 
> stop sending alert. Makes sense?
> 
> Best regards,
> - Nestor
> 
> 
> - Nestor
> 
> On Jul 2, 2013, at 4:01 AM, Martin Pala <address@hidden> wrote:
> 
>> Hi,
>> 
>> you can use sudo to allow that specific CLI command to non-root user.
>> 
>> Regards,
>> Martin
>> 
>> 
>> On Jul 2, 2013, at 12:46 AM, Nestor Urquiza <address@hidden> wrote:
>> 
>>> Hi folks,
>>> 
>>> We run monit as root which is specially important for Apache service.
>>> 
>>> Monit controls tomcat servers which run under a different user.
>>> 
>>> As a non root user I want to to be able to run 'monit tomcat stop' so that 
>>> I can manage the service the way I would do without monit.
>>> 
>>> We can issue "service tomcat stop" but of course monit restarts it again.
>>> 
>>> Thanks!
>>> 
>>> - Nestor
>>> 
>>> 
>>> 
>>> 
>>> --
>>> To unsubscribe:
>>> https://lists.nongnu.org/mailman/listinfo/monit-general
>> 
>> 
>> --
>> To unsubscribe:
>> https://lists.nongnu.org/mailman/listinfo/monit-general
> --
> To unsubscribe:
> https://lists.nongnu.org/mailman/listinfo/monit-general