Starting Talend JobServer without sudo - 7.3

Talend Data Management Platform Installation Guide for Linux

Version
7.3
Language
English (United States)
Product
Talend Data Management Platform
Module
Talend Activity Monitoring Console
Talend Administration Center
Talend Artifact Repository
Talend CommandLine
Talend Data Preparation
Talend Data Stewardship
Talend DQ Portal
Talend Identity and Access Management
Talend Installer
Talend JobServer
Talend Log Server
Talend Repository Manager
Talend Runtime
Talend SAP RFC Server
Talend Studio
Content
Installation and Upgrade
The user that starts Talend Remote Engine needs to be allowed to start processes as other users without having to enter a password.

Procedure

  1. Change the sudoers file on the machine that runs Talend Remote Engine, using the sudo visudo command.
  2. Edit the sudoers.

    Example

    # ...
    # User alias specification
    User_Alias JOB_SERVER = jerry
    
    # Cmnd alias specification
    Cmnd_Alias RUN_JOB = /bin/ps, /usr/bin/java, /bin/sh, /bin/grep, /bin/kill
    
    # ...
    # Add after the line: %sudo	ALL=(ALL:ALL) ALL
    JOB_SERVER      ALL=(jules,jim) NOPASSWD: RUN_JOB

    In this example, it is assumed that user jerry will start Talend Remote Engine and Tasks may have to run under the existing users, jules and jim.

    The Talend Remote Engine process started by jerry will need to be able to execute the following commands as jules or jim:

    /bin/ps
    /usr/bin/java
    /bin/sh
    /bin/grep
    /bin/kill

    For security reasons, do not allow more commands.

Results

To start Talend Remote Engine, the user can run sh start_rs.sh instead of sudo sh start_rs.sh.