Are sesu/sesudo supported by Delphix?

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
I'm trying to setup an environment that it's using sesu/susudo to manage
privilege elevation profiles.
Does Delphix support them?
Photo of Thom T

Thom T

  • 838 Points 500 badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Mouhssine SAIDI

Mouhssine SAIDI

  • 4,632 Points 4k badge 2x thumb
Hi Thom,

The short answer is yes, to get more info on that please follow this link https://support.delphix.com/hc/en-us/...

Regards,

Mouhssine
Photo of Sandro Latini

Sandro Latini, Employee

  • 350 Points 250 badge 2x thumb
Hi Thom,

Mouhssine pointed out a great KB, where you can find more information and some examples on how privilege elevation profiles scripts can be created.
In the specific case of sesudo, you can use the following example of dlpx_pfexec script as a reference:

# Copyright 2016 Delphix. All rights reserved.                      
#                                                                   
# - Read the password from stdin.                                   
# - Execute the passed command with elevated privileges.            
# - Output both stdout and stderr of the executed command to stdout.

read passwd                                                         
                                                                   
/usr/bin/sesudo "$@"                         
response=$?                                                        
if [ $response -ne 0 ]; then                                       
   echo "ERROR: Sesudo error ($response)"                          
   echo "$@"                                                       
   exit 1                                                          
fi

Please remember to double check all the security profiles and the permissions for the user you're trying to set up, as we found it's the most cause of issues.
(Edited)
Photo of Mouhssine SAIDI

Mouhssine SAIDI

  • 4,632 Points 4k badge 2x thumb
Hi,

Just one more important thing to notice, only delphix support have hand on accessing the delphix engine to modify or add the elevation priv you need.

Regards,

Mouhssine