Configuring IBM Storage Scale GUI to use sudo wrapper

The GUI can be configured to run on a cluster where remote root access is disabled and sudo wrappers are used. On such a cluster, the GUI process still runs as root but it issues ssh to other nodes using a user name for which sudo wrappers were configured.

Make the following configuration change to use the IBM Storage Scale management GUI on a cluster where sudo wrappers are used:

Issue the systemctl restart gpfsgui command to restart the GUI.

This ensures that the GUI is initialized with the new value of sudoUser, as specified in the mmcrcluster or mmchcluster command.

Passwordless ssh is set up between the root user on the node where the GUI is running on all the remote nodes in the cluster. The ssh calls are equivalent to ssh gpfsadmin@destination-node. Therefore, it is not necessary to set up passwordless ssh between gpfsadmin users on any two nodes. The root user of the node where the GUI is running can do passwordless ssh to any other node using the gpfsadmin user login. So, unidirectional access from the GUI node to the remote nodes as gpfsadmin user is enough.

Note: If sudo wrappers are enabled on the cluster but GUI is not configured for it, the system raises an event.