Configuring IBM Spectrum Scale GUI to use sudo wrapper
The GUI can be configured to run on a cluster where remote root access is disabled and sudo wrappers are used. On such a cluster, the GUI process still runs as root but it issues ssh to other nodes using a user name for which sudo wrappers were configured.
Make the following configuration changes to use the IBM Spectrum Scale™ management GUI on a cluster where sudo wrappers are used:
- Change GPFS_ADMIN=root to the user name that you configured as the sudo user in the gpfsgui.properties file that is located at: /usr/lpp/mmfs/gui/conf. For example, GPFS_ADMIN=gpfsadmin.
- Issue the systemctl restart gpfsgui command to restart the GUI.
Passwordless ssh is set up between the root user on the node where the GUI is running on all the remote nodes in the cluster. The ssh calls are equivalent to ssh gpfsadmin@destination-node. Therefore, it is not necessary to set up passwordless ssh between gpfsadmin users on any two nodes. The root user of the node where the GUI is running can do passwordless ssh to any other node using the gpfsadmin user login. So, unidirectional access from the GUI node to the remote nodes as gpfsadmin user is enough.