Root Access
If requested we also provide administrative (
root) access to your server if your
ITC agrees. There are two different ways how
isginf delegates administrative rights.
Restricted Administrative Rights via sudo
If you need only very restricted administrative rights we recommend to use
sudo and specify exactly what you need to do. Use cases include:
- Restarting
httpd, mysqld or other services.
- Rebooting or powering off the system.
- Killing processes.
- Manage user data ownership.
Duties
Depending on the administrative rights. For instance, if you get the right to restart a service you must make sure that it actually restarts.
Full Administrative Access via SSH
Key-based
root login via SSH is recommended if restriction via
sudo is too complex.
Requirements
You have to provide
isginf with your SSH public key for which direct
root login will be enabled. You should also be sufficiently proficient with the Linux operating system and the administrative tasks you intend to do.
Duties
Depending on the negotiated scope for the administrative rights. For instance, if you obtain the administrative rights to manage a particular service, then you are responsible to the entire service.
isginf may delegate the update process of a server to you if the update is difficult to organize and you have
root access.
Abuse
Before the rights are granted, the scope for their use is negotiated with
isginf. Users with administrative rights may use them for the designated purpose only.
Care must also be taken that users with administrative rights do not interfere with the automated management of the operating system done by
isginf.
If administrative rights are abused then isginf reserves the right to either revoke them or pass full administration of the server to the research group.