UNSOLVED
Non-root user for ScaleIO install - Possible?
Hello,
We are currently running a PoC test of ScaleIO with OpenStack/KVM combo.
We're getting tripped up by the installation of ScaleIO requiring remote root access because we do not (and will not) permit remote root ssh access. Any superuser privileges need to come from sudo (this is quite common).
Is there any way to utilize the gateway to install ScaleIO without remote root access?
Thanks!
adam_j_moore
1 Message
294
0
Posted May 19th, 2017 02:00
Is there any update on this thread? remote root of any kind is not a good idea, allowing 'permitrootlogin yes' in sshd_config is definitely a bad idea, this allows for configuration drift, especially when you have 10's of thousands of hosts to manage.
When will you support installing and managing SCALIO with a lesser privileged account?
Hi Adam,
I'm afraid not - "root" account is still a requirement in Linux environment. You can harden security by using the SSH keys.If it's a show-stopper for you, could you please fill out an Enhancement Request or contact someone from your local EMC team so Dev can consider adding such functionality?
Many thanks,
Pawel
pawelw1
306 Posts
294
0
Posted November 18th, 2016 00:00
Hi David,
To my best knowledge, currently only 'root' user is supported with Linux. There might be some plans to allow non-root users (yet with root priviledges) in the future versions of ScaleIO, but it's quite far on the roadmap, so I'm afraid it won't happen any time soon.
Maybe you can think of losing security a little and allow remote root users authenticated by SSH keys from specific machines? That is quite secure, especially if you password-encrypt the keys on the source side.
Cheers,
Pawel