Linux

Ask something
Discussion Locked

3 questions

0 helpful
5 replies

by rezuma

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

1) Root access for users on laptops: The dilemma here is that, we don't want
to give the root password for laptops to the regular users, because of the
changes that they might make to the configuration (intentionally, or
unintentionally), however, the problem is that most of these users, take
their laptops with them on extended trips across the world, and since some of
them have dual boot (Linux/Windows 2000), they might encounter problems that
they would need root privilege, because of support not being available for
them until they return from their trip. Also, they might want to install
applications, etc. I need help to figure out a solution for this. Here are
a few things that I have bounced around:
a) Using sudo. The problem here is how would I enable the users to install
(using rpm) only a certain type of applications, and not other applications?
b) Creating a super-user account, with a UID of zero. How would this work?
What are the pros and cons for this?
c)What is a good solution that other companies are using for this problem?

2) Data Backup - The users here are going to be responsible for their own
backups. What I'm trying to do is recommend a good solution (tools, scripts,
etc.) for the users to be able to easily backup files or even make images of
their drives on a USB external storage device. Also, the solution should
include sync-ing the data on the hard drive with data on the external storage
device if the user decides to configure certain files/directories to do this.

3)I currently have a LaCIE 120 GB USB Hard Drive and I need help with
formatting it and testing it with any backup tools, or scripts (#2 above).

thanks

5 replies

by jcmcintyre

Root access

sudo from www.courtesan.com/org is the way to go. Actually, no root login is required. Just setup sudo to alow users to run the commands they need to perform backups etc. You could put all the necessary commands in the user's home directory, and allow them to be run from there.

This also has the benefit of enabling you to prevent user access to directories containing system commands.

Data Backup

Mondo rescue / mondo rescue is a good solution.It allows users to perform any backup operation, and data recovery is easy

The La Cie drive could be formatted with any filesystem, as long as you can write to the disk. The only reliable way to test the drive is to perform backup and recovery operations with the utility you select

As for scripts, there is almost no limit on what you could include here. You could use a script to call the tar command, or to use any backup tool on your system.

Make sure everything else is in place and working correctly before you write any backup scripts. That way, you know the hardware and software are OK if you have to troubleshoot script problems

Cheers

by bwaynef

I question why having dual-boot would likely force the user to encounter problems. As long as you have a good install of grub/lilo what a user does in win2k is beyond the powers of root.

sudo would allow you to give access to certain commands.Allowing users free access to rpm is disaster in waiting and there arent any ways to distinguish between files that rpm can and cant install. Why are they installing applications anyway. Give them the tools they need when you give them the computer and expect it to be returned in a similar state. I'm sure somewhere in your company's policies there are provisions that don't allow for this, or at least allow you to deny them the access to that. Aside from this, assuming they'll be going where the internet is make sure the ssh daemon is running and administer their machines that way without ever giving up root to your users.

2) set up a cron job with dump to whatever device you want to back up to. Rsync is also a great device for syncronization of files. If you want to take it a step further you could provide them with vpn access (vpnd) to your network and do a compressed rsync to a backup server on your local network....secured thru ssh. (The rsync man page is quite verbose, should be easy enough for you. And if they're not pulling down huge files then the compressed backups shouldnt take very long over a decent internet connection.)

3) seems to have been answered quite well earlier

This discussion is closed to new replies.