Creating admin account for services

jrvt · 12-05-2007, 02:15 PM

Hi, im trying to configure a user account taht would be allowed to start vsftpd service, smb service, apache2 service.

I added a username and defined the initial group as adm and then added that other groups as daemon and bin. Im usin linux.

What else can i do to grant a user account grants so it can iniciate services such as vsftpd, samba, apache.

Thanks

reddazz · 12-05-2007, 02:49 PM

Usually the system automatically creates its own users for the services you mentioned, so there may be no need for you to create a user specifically for those services.

complich8 · 12-05-2007, 03:42 PM

Sounds to me like you're basically asking "how do I set up sudo so certain users can run specific init scripts"?

win32sux · 12-05-2007, 03:43 PM

You could setup sudo to let the user account execute those specific binaries.

jrvt · 12-05-2007, 06:21 PM

Quote:

Originally Posted by reddazz

Usually the system automatically creates its own users for the services you mentioned, so there may be no need for you to create a user specifically for those services.

Yes i have for example an apache user but is set to /nologin but i have 2 apache server one came with the red hat i have and the other one apache2 i installed.

Do i need to change the /nolgoin option for that user so i can use it. And for the vsftpd and smb services i dont have a specific user under /etc/passwd.

Is there something you can recomend me to do

Thanks.

jrvt · 12-05-2007, 06:26 PM

Quote:

Originally Posted by win32sux

You could setup sudo to let the user account execute those specific binaries.

I have not used sudo, comlich8 has mentioned sudo command to. Ill look form some doc on the google to get around that command. think that is what i need.

I have tested the command with the admsvc user i created, but when i execute sudo it automatically asks me for a password. I have to set up some permissions so that user can run the services i want to, that will solve my issue?

Ill research and post my results.

Tanks for the help, you all!

win32sux · 12-05-2007, 07:04 PM

Quote:

Originally Posted by jrvt

I have tested the command with the admsvc user i created, but when i execute sudo it automatically asks me for a password. I have to set up some permissions so that user can run the services i want to, that will solve my issue?

sudo can be setup to require (or NOT require) sudoers to type their password. It's up to you. You don't need to set any special permissions on the service binaries if you use sudo. Just create the group you want to use for sudoers, add the appropriate line to /etc/sudoers (using the visudo tool), and then add any users which you want to be sudoers to that group. There's tons of examples on the WWW.

reddazz · 12-06-2007, 01:26 AM

Quote:

Originally Posted by jrvt

Yes i have for example an apache user but is set to /nologin but i have 2 apache server one came with the red hat i have and the other one apache2 i installed.

Do i need to change the /nolgoin option for that user so i can use it. And for the vsftpd and smb services i dont have a specific user under /etc/passwd.

Is there something you can recomend me to do

Thanks.

My apologies. I thought you wanted to create a system user to run those services. Anyway, I think follow the suggestions posted by others in this thread and use something like sudo.

jrvt · 12-06-2007, 10:16 AM

Thanks for the help. Now i have set up the account i created to use sudo and it can manage the services i want.

Thanks again.