Forum Discussion
Stefan98_85555
Nimbostratus
NimbostratusRestrict executable commands for an account
Hi all,
i have an script on a server, which must only enable/disable poolmembers of a specific pool. The user (which the script use) on the LTM should have no more rights than for this task. Is there an easy solution for this problem?
If the user has operator-rights, he can read all objects in the partition. I can restrict the ssh-account with a tool like authprogs.pl, but IMHO its not a good solution...
regards
- The_BhattmanHave you looked at the samples section specifically iControls section
http://devcentral.f5.com/wiki/default.aspx/iControl.CodeShare
There might be scripts you can alter to suit your needs.
CB 
Stefan98_85555No, i found no script that helps to solve my problem. I think it is a problem with the configuration. Maybe there is a possibility to restrict the rights of a to the required actions.
regards- The_BhattmanWhat version of LTM are you running?
CB - Stefan98_85555BIG-IP 9.4.5 Build 1086.1 Hotfix HF2
- The_BhattmanCouldn't you create your objects in a separate partision and then assign a username to that partition?
- Stefan98_85555This seems to be the "best" possibility. I hope, that i will never need a user with rights on several partitions...
Thanks for the help :-) ...
