Copyright © Acronis, Inc., 2000-2010
79
2.
Add the names of the non-root users, whom you want to allow to connect to the machine
remotely, to the
Acronis_Trusted
group. For example, to add the existing user user_a to the
group, run the following command:
usermod -G Acronis_Trusted user_a
3.
Create the file
/etc/pam.d/Acronisagent-trusted
with the following content:
#%PAM-1.0
auth required pam_unix.so
auth required pam_succeed_if.so user ingroup Acronis_Trusted
account required pam_unix.so
Example 2
The above authentication policy might not work on Linux distributions with kernel version 2.4—
including Red Hat Linux and VMware
®
ESX™ 3.5 Upgrade 2—because the pam_succeed_if.so module
is not supported there.
In this case, you can use the following authentication policy.
1.
As the root user, create the file
/etc/pam.d/Acronis_trusted_users
2.
Add the names of the non-root users whom you want to allow to manage the machine, to this
file, one user name per line. For example, if you want to add the users user_a, user_b, and
user_c, add the following three lines to the file:
user_a
user_b
user_c
If necessary, also add the root user to the file.
3.
Create the file
/etc/pam.d/Acronisagent-trusted
with the following content:
#%PAM-1.0
auth required pam_unix.so
auth required pam_listfile.so item=user sense=allow
file=/etc/pam.d/Acronis_trusted_users onerr=fail
account required pam_unix.so
2.14.7.5
Acronis security groups
On a machine running Windows, Acronis security groups determine who can manage the machine
remotely and act as Acronis Backup & Recovery 10 Management Server administrator.
These groups are created when Acronis Backup & Recovery 10 Agents or Acronis Backup & Recovery
10 Management Server are being installed. During installation, you can specify what users to include
in each group.
Acronis Backup & Recovery 10 Agents
When Acronis Backup & Recovery 10 Agent for Windows is being installed on a machine, the
Acronis
Remote Users
group is created (or updated).
A user who is a member of this group can manage the machine remotely by using Acronis Backup &
Recovery 10 Management Console, according to the management rights described in Users'
privileges on a managed machine (p. 31).
By default, this group includes all members of the Administrators group.
