Skip to content

Commit

Permalink
Merge pull request #411 from SUSE/lpinne-issue-410
Browse files Browse the repository at this point in the history
fix issue #410
  • Loading branch information
chabowski authored Jan 10, 2024
2 parents dacd3ed + 07fd919 commit a49db91
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions adoc/SLES4SAP-hana-scaleout-multitarget-perfopt-15.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -1607,14 +1607,15 @@ details.
.Entry in sudo permissions /etc/sudoers.d/SAPHanaSR file
===================================
Example for basic options to allow {refsidadm} to use the hook scripts.
Replace the {refsidLC} by the lowercase SAP system ID.
Replace the {refsidLC} by the lowercase SAP system ID. Replace the {refsid} by
the uppercase SAP system ID.
[subs="specialchars,attributes"]
----
# SAPHanaSR-ScaleOut needs for HA/DR hook scripts
{refsidadm} ALL=(ALL) NOPASSWD: /usr/sbin/crm_attribute -n hana_{refsidLC}_site_srHook_*
{refsidadm} ALL=(ALL) NOPASSWD: /usr/sbin/crm_attribute -n hana_{refsidLC}_gsh *
{refsidadm} ALL=(ALL) NOPASSWD: /usr/sbin/SAPHanaSR-hookHelper --sid={refsidLC} *
{refsidadm} ALL=(ALL) NOPASSWD: /usr/sbin/SAPHanaSR-hookHelper --sid={refsid} *
----
// TODO PRIO3: align with manual page SAPHanaSrMultiTarget.py(7)
Expand All @@ -1626,7 +1627,7 @@ More specific parameters option to meet a high security level.
Cmnd_Alias SOK = /usr/sbin/crm_attribute -n hana_{refsidLC}_glob_srHook -v SOK -t crm_config -s SAPHanaSR
Cmnd_Alias SFAIL = /usr/sbin/crm_attribute -n hana_{refsidLC}_glob_srHook -v SFAIL -t crm_config -s SAPHanaSR
Cmnd_Alias GSH = /usr/sbin/crm_attribute -n hana_{refsidLC}_glob_srHook -v * -l reboot -t crm_config -s SAPHanaSR
{refsidadm} ALL=(ALL) NOPASSWD: /usr/sbin/SAPHanaSR-hookHelper --sid={refsidLC} --case=checkTakeover
{refsidadm} ALL=(ALL) NOPASSWD: /usr/sbin/SAPHanaSR-hookHelper --sid={refsid} --case=checkTakeover
{refsidadm} ALL=(ALL) NOPASSWD: SOK, SFAIL, GSH
----
////
Expand Down

0 comments on commit a49db91

Please sign in to comment.