[ClusterLabs] Change permissions from command line

[Tomas Jelinek]

Dne 26.10.2016 v 12:37 Auer, Jens napsal(a):
> Hi,
>
> is it possible to change user permissions from the command line? I am

Hi Jens,

Using the web interface is the only option currently. I filed a bug for 
adding permissions management to cli.
https://bugzilla.redhat.com/show_bug.cgi?id=1389214

> currently changing them via the web interface, but I have to write a
> manual and just pasting commands is easier than showing screenshots. I
> know pcs can edit acl settings, but I don't know how to change permissions.
>
> I found the permissions in /var/lib/pcsd/pcs_settings.conf. Is it ok to
> edit this file when the cluster is stopped and then just restart the
> cluster?

You can edit the file safely with the cluster (corosync, pacemaker and 
even pcsd) running. However this file is synchronized across the cluster 
nodes automatically by pcsd. You can edit it manually at any time but 
you need to increment the "data_version" field enough to be the highest 
across the cluster before saving the file. Otherwise your changes will 
be lost in the synchronization process. Also be careful not to make any 
error in the file as it would lead to the file being restored from other 
cluster nodes and your changes being lost.

Hope that helps,
Tomas

>
> Best wishes,
>   Jens
>
> --
> *Jens Auer *| CGI | Software-Engineer
> CGI (Germany) GmbH & Co. KG
> Rheinstraße 95 | 64295 Darmstadt | Germany
> T: +49 6151 36860 154
> _jens.auer at cgi.com_ <mailto:jens.auer at cgi.com>
> Unsere Pflichtangaben gemäß § 35a GmbHG / §§ 161, 125a HGB finden Sie
> unter _de.cgi.com/pflichtangaben_ <http://de.cgi.com/pflichtangaben>.
>
> CONFIDENTIALITY NOTICE: Proprietary/Confidential information belonging
> to CGI Group Inc. and its affiliates may be contained in this message.
> If you are not a recipient indicated or intended in this message (or
> responsible for delivery of this message to such person), or you think
> for any reason that this message may have been addressed to you in
> error, you may not use or copy or deliver this message to anyone else.
> In such case, you should destroy this message and are asked to notify
> the sender by reply e-mail.
>
>
> _______________________________________________
> Users mailing list: Users at clusterlabs.org
> http://clusterlabs.org/mailman/listinfo/users
>
> Project Home: http://www.clusterlabs.org
> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org
>