Chapter 6: Deploying The Globus Toolkit 4.0.x
Configuring sudo
A number of the Globus grid services, including GRAM WS, need to use the 'sudo' command in order to execute processes as the user that is requesting the service act on its behalf.
One must use the command "visudo" to edit the /etc/sudoers file. It is a special wrapper to vi that preserves the file permissions.
/usr/sbin/visudo (no file or path necessary)
As user root edit the file /etc/sudoers and add the following two lines:
Note: The following text appears on multiple lines, but each entry should be entered as one line of text
globus ALL=(jane) NOPASSWD: /opt/globus-4.0.1/libexec/globus-gridmap-and-execute -g /opt/globus-4.0.1/etc/grid-mapfile /opt/globus-4.0.1/libexec/globus-job-manager-script.pl *
and
globus ALL=(jane) NOPASSWD: /opt/globus-4.0.1/libexec/globus-gridmap-and-execute -g /opt/globus-4.0.1/etc/grid-mapfile /opt/globus-4.0.1/libexec/globus-gram-local-proxy-tool *
Those two lines will allow user 'globus' to use sudo to execute commands for user 'jane'. We are using 'jane' as the generic user account in this tutorial. You can use whatever generic user account on your system that you want, simply change the account name in the lines above to that account.
|