Starting Talend JobServer without sudo - 7.3

Talend Installation Guide for Linux

Version
7.3
Language
English
EnrichDitaval
Linux
EnrichSubscriptionType
Subscription
Product
Talend Big Data
Talend Big Data Platform
Talend Data Fabric
Talend Data Integration
Talend Data Management Platform
Talend Data Services Platform
Talend ESB
Talend MDM Platform
Talend Real-Time Big Data Platform
Module
Talend Activity Monitoring Console
Talend Administration Center
Talend Artifact Repository
Talend CommandLine
Talend Data Preparation
Talend Data Stewardship
Talend DQ Portal
Talend ESB
Talend Identity and Access Management
Talend Installer
Talend JobServer
Talend LogServer
Talend MDM Server
Talend MDM Web UI
Talend Repository Manager
Talend Runtime
Talend SAP RFC Server
Talend Studio
Content
Installation and Upgrade
The user that starts Talend Remote Engine needs to be allowed to start processes as other users without having to enter a password.

Procedure

  1. Change the sudoers file on the machine that runs Talend Remote Engine, using the sudo visudo command.
  2. Edit the sudoers.

    Example

    # ...
    # User alias specification
    User_Alias JOB_SERVER = jerry
    
    # Cmnd alias specification
    Cmnd_Alias RUN_JOB = /bin/ps, /usr/bin/java, /bin/sh, /bin/grep, /bin/kill
    
    # ...
    # Add after the line: %sudo	ALL=(ALL:ALL) ALL
    JOB_SERVER      ALL=(jules,jim) NOPASSWD: RUN_JOB

    In this example, it is assumed that user jerry will start Talend Remote Engine and Tasks may need to run under the existing users, jules and jim.

    The Talend Remote Engine process started by jerry will need to be able to execute the following commands as jules or jim:

    /bin/ps
    /usr/bin/java
    /bin/sh
    /bin/grep
    /bin/kill

    For security reasons, do not allow more commands.

Results

To start Talend Remote Engine, the user can run sh start_rs.sh instead of sudo sh start_rs.sh.