treydock / gpfs_exporter

Apache License 2.0
38 stars 14 forks source link

Add option to replace sudo with dzdo #53

Closed richardwcollins closed 2 years ago

richardwcollins commented 2 years ago

Authentication and privilege escalation is managed through Centrify on particular site, which uses dzdo instead of sudo. We have successfully enabled dzdo for all /usr/lpp/mmfs/bin/* commands using a policy for a specific user.

Is it possible to add a config option to set dzdo as the execCommand prefix - or is there an alternative approach to force execCommand to use dzdo?

treydock commented 2 years ago

Would something like this work?

--config.sudo.command=dzdo

That would just make it so instead of doing sudo /usr/lpp/mmfs/bin/mmgetstate -Y you'd get dzdo /usr/lpp/mmfs/bin/mmgetstate -Y.

richardwcollins commented 2 years ago

Yes - that would work perfectly well. Thanks for picking this up

treydock commented 2 years ago

Released v2.2.0 with this change: https://github.com/treydock/gpfs_exporter/releases/tag/v2.2.0