Unsolved
This post is more than 5 years old
1 Rookie
•
7 Posts
0
629
November 17th, 2016 09:00
Non-root user for ScaleIO install - Possible?
Hello,
We are currently running a PoC test of ScaleIO with OpenStack/KVM combo.
We're getting tripped up by the installation of ScaleIO requiring remote root access because we do not (and will not) permit remote root ssh access. Any superuser privileges need to come from sudo (this is quite common).
Is there any way to utilize the gateway to install ScaleIO without remote root access?
Thanks!
No Events found!
pawelw1
306 Posts
0
November 18th, 2016 00:00
Hi David,
To my best knowledge, currently only 'root' user is supported with Linux. There might be some plans to allow non-root users (yet with root priviledges) in the future versions of ScaleIO, but it's quite far on the roadmap, so I'm afraid it won't happen any time soon.
Maybe you can think of losing security a little and allow remote root users authenticated by SSH keys from specific machines? That is quite secure, especially if you password-encrypt the keys on the source side.
Cheers,
Pawel
adam_j_moore
1 Message
0
May 19th, 2017 02:00
Is there any update on this thread? remote root of any kind is not a good idea, allowing 'permitrootlogin yes' in sshd_config is definitely a bad idea, this allows for configuration drift, especially when you have 10's of thousands of hosts to manage.
When will you support installing and managing SCALIO with a lesser privileged account?
pawelw1
306 Posts
0
May 24th, 2017 04:00
Hi Adam,
I'm afraid not - "root" account is still a requirement in Linux environment. You can harden security by using the SSH keys.If it's a show-stopper for you, could you please fill out an Enhancement Request or contact someone from your local EMC team so Dev can consider adding such functionality?
Many thanks,
Pawel