Re: Restricting access of tacmd commands
John Alvord <jalvord-r/[email protected]>
| Newsgroups | gmane.comp.sysutils.tivoli.general,gmane.comp.sysutils.tivoli.tme10 |
|---|---|
| Message-ID | <OFD852145C.0F3EA5B4-ON88257B94.0053BAD2-88257B94.0054E83D@us.ibm.com> |
On Linux/Unix , tacmd is a shell command. You could change user/group so that only a limited number of people can execute it and only one [root?] could alter it. You add some exit facility that screens usage and exits if not allowed for a particular user. Or you can create a tacmd invoker that does the screening and then invokes the real tacmd in a different directory. The tacmd login function can accept all parameters from standard input. That way you could hide the userid/password from general knowledge. Set up the SOAP access control configuration so only a limited number of users can use.... but SOAP is really an open access port. You cannot really make any distinction in usage. The only protection is userid/password that is not widely known. Probably the best path is just to limit the number of users and audit the usage. Regards, ______________________________________________ John Alvord Advisory Engineer IBM Tivoli Monitoring 6 Platform Customer Support Office: 1-720-396-2788 Mobile: none jalvord-r/[email protected] Cloud & Smarter Infrastructure IBM Support Portal Open a New Service Request Update your PMR via Email Escalate your PMR My Blog: Wonderful World of Situations Secure upload to ECUREP From: Julius Loman <[email protected]> To: "Discussion list for Tivoli product and Tivoli Ready products." <[email protected]>, Date: 06/24/2013 04:36 AM Subject: Re: [TME10] Restricting access of tacmd commands Sent by: [email protected] No, HUB TEMS SOAP interface does not offer such access granularity. I would recommend you to create a wrapper for the commands you need. On Mon, Jun 24, 2013 at 03:51:21PM +0530, kalpesh parmar <[email protected]> wrote: > List, > > I am looking to assign restriced access of selective tacmd commands. > > Query : > Is it possible to give user an access to selective set of tacmd command and > not all?? > > e.g. Give user an access of tacmd listsystemlist and listsit only. > > is it possible? > > Thanks and regards > KP > _______________________________________________ > TME10 mailing list > [email protected] > Unsubscribe:[email protected] -- [ Julius Loman ][ [email protected] ][ http://lomo.kyberia.net ][ icq:35732873 ] _______________________________________________ TME10 mailing list [email protected] Unsubscribe:[email protected] _______________________________________________ TME10 mailing list [email protected] Unsubscribe:[email protected]