Changes between Version 61 and Version 62 of Download/SCDB

Timestamp:

Sep 15, 2008, 11:01:28 PM (17 years ago)

Author:

/O=GRID-FR/C=FR/O=CNRS/OU=LAL/CN=Michel Jouvin

Comment:

Document use of sudo as a SSH replacement

Download/SCDB

@@ -311 +311 @@
 Currently, deployment of new version of the templates is done by the hook script triggered by `ant deploy` executing the server script `build-tag.pl` through ssh. There is no way to enter a password at this time, thus ssh must be configured in such a way that the Apache account on the Subversion server can do a ssh connection as root on the Quattor server, without password. The easiest is to use ssh keys to do that.
 
+''Note: if you run SVN server on the Quattor server, an alternative to SSH is to use `sudo`. This currently requires to use a specific variant of the `post-commit` script, `post-commit.sudo`. After installing the script, instead of configuring SSH keys, you need to add the following configuration lines (customize them to reflect your local configuration) to `sudo` with `visudo` utility:''
+{{{
+Cmnd_Alias   QUATTORDEPLOY=/root/quattor/scripts/build-tag.pl *
+Cmnd_Alias   AIIACKCGI=/usr/sbin/aii-shellfe
+
+apache ALL = NOPASSWD: QUATTORDEPLOY
+apache ALL = NOPASSWD: AIIACKCGI
+}}}
 
 === Post-installation CGI Script ===