Discussion:
EON - zfs send and zfs receive
Erwin Panen
2011-04-30 22:46:38 UTC
Permalink
Hi,

How can I allow a user to use zfs send / zfs receive?
Purpose is to allow for remote replication of zfs data using ssh.

Thank you,

Erwin
--
This message posted from opensolaris.org
Andre Lue
2011-05-02 04:19:33 UTC
Permalink
Please see

http://wikitech-static.wikimedia.org/articles/z/f/s/Zfs_replication.html

http://breden.org.uk/2008/05/12/home-fileserver-backups-from-zfs-snapshots/

http://blogs.sun.com/jbeck/entry/using_zfs_to_migrate_data
--
This message posted from opensolaris.org
Erwin Panen
2011-05-02 20:41:16 UTC
Permalink
Hi Andre,

Thanks for the links; already found a couple myself, but yours are very informative thanks.

My question is more related to 'how to change user permissions' in such a way that a user is allowed to "zfs send" & "zfs receive".
I've tried a couple of things (delegation a.o.) but have not been able to get it to work.

Your third link uses 'root'; I'v also followed this path, but would prefer to be able to promote a user's permission's level.

I've not found the profile=Primary Administrator on EON.

Could you enlighten me?

Erwin
--
This message posted from opensolaris.org
Andre Lue
2011-05-02 21:47:01 UTC
Permalink
Hi Lexje,

Normally such rights are not granted to users hence it is not included. If you wish to do it you can but you should try to understand the security risks you entertain by doing so. Note that user will have a root role

simply edit /etc/user_attr file to include a line for each user you wish to allow
example jack
jack::::profiles=Primary Administrator;roles=root

then preceding the cmd with a pfexec as that user should be allow the user to zfs send /receive.
you could experiment with more granular roles like
File System Management
ZFS File System Management
ZFS Storage Management
--
This message posted from opensolaris.org
Loading...