Example 13-2 SUDO Example 1: Allow a User to Perform Any ODACLI
Operation
This example shows how to configure SUDO to enable a user to perform any ODACLI
operation. You do this by adding lines to the commands section in the
/etc/sudoers
file:
## The commands section may have other options added to it.
##
Cmnd_Alias ODACLI_CMDS=/opt/oracle/dcs/bin/odacli *
jdoe ALL = ODACLI_CMDS
In this example, the user name is
jdoe
. The file parameter setting
ALL= ODACLI_CMDS
grants the user
jdoe
permission to run all
odacli
commands that are defined by the
command alias
ODACLI_CMDS
. After configuration, you can copy one
sudoers
file to
multiple hosts. You can also create different rules on each host.
Note:
Before database creation, you must set up user equivalency with SSH for the
root user on each server. If you do not set up user equivalency and configure
SSH on each server, then you are prompted to provide the root password for
each server during database creation.
After you configure the
sudoer
file with the user, the user
jdoe
can run the set of
odacli
commands configured with the command alias
ODACLI_CMDS
. For example:
odacli create-database --dbname newdb -m
Password for SYS,SYSTEM and PDB Admin:
Job details
----------------------------------------------------------------
ID: 1bc31577-f910-4d3f-b6ff-8e3fccd30141
Description: Database service creation with db name: newdb
Status: Created
Created: November 30, 2018 9:23:57 AM PST
Message:
Task Name Start Time End Time Status
-----------------------------------------------------------
Chapter 13
Managing ODACLI Privileges and Security with SUDO
13-6
Summary of Contents for Database Appliance X6-2-HA
Page 15: ...Index xv...
