<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<title>RE: [Linux-cluster] Testing a fence program</title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PersonName"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>It’s not really the ssh solution via
keys that’s the problem, it’s allowing root to login via ssh that
the problem. That is strictly prohibited. Xm destroying a host
requires root access. We cannot su to xm destroy after we login as
a non root user for obvious reasons. Sudo is right out of the question in
our environment. I’m not even going to try to mix up GRSecurity RBAC
policies and sudo policies, etc<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
linux-cluster-bounces@redhat.com [mailto:linux-cluster-bounces@redhat.com] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Patton, Matthew F, CTR,
OSD-PA&E<br>
<b><span style='font-weight:bold'>Sent:</span></b> Tuesday, August 22, 2006
1:52 PM<br>
<b><span style='font-weight:bold'>To:</span></b> 'linux clustering'<br>
<b><span style='font-weight:bold'>Subject:</span></b> RE: [Linux-cluster]
Testing a fence program</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p><font size=2 face="Times New Roman"><span style='font-size:10.0pt'>Classification:
UNCLASSIFIED</span></font> <o:p></o:p></p>
<p><st1:PersonName w:st="on"><font size=2 face="Times New Roman"><span
style='font-size:10.0pt'>John Anderson</span></font></st1:PersonName><font
size=2><span style='font-size:10.0pt'> wrote:</span></font> <o:p></o:p></p>
<p><font size=2 face="Times New Roman"><span style='font-size:10.0pt'>> Since
my security department frowns strongly on authentication by ssh</span></font> <br>
<font size=2><span style='font-size:10.0pt'>> key</span></font> <o:p></o:p></p>
<p><font size=2 face="Times New Roman"><span style='font-size:10.0pt'>Can you
elaborate on what their problems are? Is the security department staffed by the
clueless?</span></font> <br>
<font size=2><span style='font-size:10.0pt'>Because the whole SOAP solution
while downright creative, is so unnecessary. </span></font><o:p></o:p></p>
</div>
</body>
</html>