The user that starts Talend Remote Engine needs to be allowed to start processes as other users without having to enter a
password.
Procedure
-
Change the sudoers file on the machine that runs Talend Remote Engine, using the
sudo visudo command.
-
Edit the sudoers.
Example
# ...
# User alias specification
User_Alias JOB_SERVER = jerry
# Cmnd alias specification
Cmnd_Alias RUN_JOB = /bin/ps, /usr/bin/java, /bin/sh, /bin/grep, /bin/kill
# ...
# Add after the line: %sudo ALL=(ALL:ALL) ALL
JOB_SERVER ALL=(jules,jim) NOPASSWD: RUN_JOB
In this example, it is assumed that user jerry
will start
Talend Remote Engine and Tasks may need to run under the existing users,
jules
and jim
.
The Talend Remote Engine process
started by jerry
will need to be able to execute the
following commands as jules
or jim
:
/bin/ps
/usr/bin/java
/bin/sh
/bin/grep
/bin/kill
For security reasons, do not allow more commands.
Results
To start Talend Remote Engine, the user can
run sh start_rs.sh instead of sudo sh
start_rs.sh
.