structor icon indicating copy to clipboard operation
structor copied to clipboard

sudo -u x -i doesn't work

Open alanfgates opened this issue 11 years ago • 2 comments

[vagrant@nn ~]$ sudo -u hive -i This account is currently not available.

But: [vagrant@nn ~]$ sudo -u hive bash bash-4.1$ whoami hive

Pretty minor, but it's still useful.

alanfgates avatar Jun 18 '14 21:06 alanfgates

It is because hive doesn't have a shell defined. In particular, it looks like: hive:x:493:493:Hive:/var/lib/hive:/sbin/nologin I see the other service accounts have bash as their shell. In general, the user accounts should have /sbin/nologin as their shell since it is considered more secure. I suspect the difference is coming up because vagrant is creating the hive user and the hadoop rpms are creating the hdfs and yarn users.

omalley avatar Jun 18 '14 22:06 omalley

Okay, thanks very much for the additional info!

On Wed, Jun 18, 2014 at 6:26 PM, omalley [email protected] wrote:

It is because hive doesn't have a shell defined. In particular, it looks like: hive[image: :x:]493:493:Hive:/var/lib/hive:/sbin/nologin I see the other service accounts have bash as their shell. In general, the user accounts should have /sbin/nologin as their shell since it is considered more secure. I suspect the difference is coming up because vagrant is creating the hive user and the hadoop rpms are creating the hdfs and yarn users.

— Reply to this email directly or view it on GitHub https://github.com/hortonworks/structor/issues/2#issuecomment-46502622.

CONFIDENTIALITY NOTICE NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.

davidhoyle avatar Jun 18 '14 22:06 davidhoyle