Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


remote access to the redhat linux server

Posted on 2007-12-06
Medium Priority
Last Modified: 2013-12-06
Dear Sir/Madam:

I have redhat linux enterprise version 5 as network opearating system  in my lan which can be accessed from the remote by ssh , we have software development team in the remote place now they have to login to this server from remote install and test the developed application , application is developed using java , mysql and apache  this is fine , problem is i do not want to give the  ssh root access to login from the remote place but if given ordinary ssh login they will not able able to install , remove packages of apache , mysql and java packages also they cannot start or stop the services , please suggest me how to give them the full access for these work and deny other access, please help me step by step.

Please help me on this

Question by:D_wathi
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 19

Accepted Solution

alextoft earned 2000 total points
ID: 20420305
You're asking how you can give them root access without giving them root access... interesting.

How about giving them a virtual machine to play with? RedHat 5 comes with Xen, or there is the free VMware server option. Then they can have a server to test on with root access.
LVL 88

Expert Comment

ID: 20420444
Standard operation is that SSH doesn't have root rights anyway. Once you have logged in as a standard user you can use su or sudo to allow the logged in user to install things or administrate the system. You just have to add the user to the /etc/sudoer file, or add him to the group that is allowed to su.

Expert Comment

ID: 20420729
Sudo is the way, but you might want to give restricted permissions. It is possible to define a precise list of executables which your users will be able to access without entering a password. Once your sudoers are configured, users must use 'sudo' to call the executables.

Example /etc/sudoers

# /etc/sudoers : edit only as root with 'visudo'
# Define aliases
User_Alias	OPERATORS  = a, b, c
Cmnd_Alias	OPERATIONS = /usr/sbin/command_a /sbin/command_b
# Default permissions for root and admin user group
root		ALL = (ALL) ALL
%admin		ALL = (ALL) ALL
# Special permissions for OPERATORS, can execute all OPERATIONS without password

Open in new window

LVL 14

Expert Comment

ID: 20420881
Just to clarify what other's have said "sudo" stands for "super-user do".  It allows a normal user to "do" things are a "super user".  This access is controlled by a configuration file, /etc/sudoers, that tells the sudo command who can run what.  You should always edit the sudoers file by typing "visudo", not directly.  You can customize it up the wazoo... see the man page or your system may have come with a good example (redhat does).

I would really suggest, as alextoft suggested, that they do their actual testing in a virtual machine.  Or another physical machine that you give them root access to.  They're going to screw it up and change an unknown billion options.  They should give you precise step-by-step instructions on how to install it on a staging server.  This is a good exercise that ALL software/development companies should do.  Otherwise you're going to have to re-load this later and you'll be SOL.

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You ever wonder how to backup Linux system files just like Windows System Restore?  Well you can use Timeshift in Linux to perform those similar action.  This tutorial will show you how to backup your system files and keep regular intervals. Note…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question