ClearFoundation

Hi,

I will like to know if it's possible to have another user other than root with full webconfig administrative priviledges. In ClearOS 5.1, there used to be a way to do this via System -> Settings -> Administrator. In ClearOS 6.3, that feature is gone.

I will like to know, how do I achieve this in ClearOS 6.3?

Thanks

Sorry I don't know

www.clearfoundation.com/docs/release_inf..._release_information
The Administrators app does not fit into the group-based policy engine in ClearOS 6. The underlying mechanism that existed in ClearOS 5 has been ported to version 6, but it requires command line configuration.

Upcoming task is to make sub-admins part of the LDAP d accounts in 6.

Until then, to give a user you have created sub-admin access:

Create the file:

/var/clearos/base/access_control/custom/access_control

With the format:

username = ... list of allowed urls .. Example bob = /app/date, /app/content-filter

Here is a full list of apps as of today.

/app/reports, /app/multiwan, /app/accounts, /app/php, /app/software_updates, /app/base, /app/certificate_manager, /app/ bandwidth_viewer, /app/devel, /app/marketplace, /app/print_server, /app/mail_notification, /app/web_proxy, /app/mail_archive, /app/ network_visualiser, /app/port_forwarding, /app/wireless, /app/smtp_plugin, /app/system_database, /app/mail_antispam, /app/ mail_antivirus, /app/print_server_plugin, /app/ntp, /app/ssh_server, /app/tiki_wiki, /app/account_import, /app/backuppc, /app/ registration, /app/proxy_report, /app/edition, /app/mail_report, /app/imap_plugin, /app/imap, /app/mail_extension, /app/ software_repository, /app/clearsync, /app/openvpn_plugin, /app/user_certificates, /app/suva, /app/user_certificates_plugin, /app/ clearcenter, /app/log_viewer, /app/dashboard, /app/web_server, /app/mail, /app/mail_quarantine, /app/mail_routing, /app/ mail_settings, /app/netatalk, /app/mobile_demo, /app/mail_filter, /app/dhcp, /app/egress_firewall, /app/nat_firewall, /app/ content_filter, /app/groups, /app/flexshare, /app/mysql, /app/dmz, /app/antiphishing, /app/antivirus, /app/bandwidth, /app/ configuration_backup, /app/contact_extension, /app/date, /app/disk_usage, /app/dns, /app/file_scan, /app/firewall, /app/ firewall_custom, /app/ftp, /app/ftp_plugin, /app/graphical_console, /app/greylisting, /app/incoming_firewall, /app/intrusion_detection, / app/intrusion_prevention, /app/intrusion_protection_report, /app/kolab_directory_extension, /app/language, /app/ldap, /app/mode, / app/network, /app/openldap, /app/openldap_directory, /app/openvpn, /app/organization, /app/password_policies, /app/pbx, /app/ pptpd, /app/pptpd_plugin, /app/process_viewer, /app/protocol_filter, /app/radius, /app/raid, /app/samba, /app/samba_extension, / app/samba_file_extension, /app/shell_extension, /app/simple_mode, /app/smtp, /app/storage, /app/system_applications, /app/ system_services, /app/tasks, /app/user_profile, /app/users, /app/web_access_control, /app/web_proxy_plugin, /app/zarafa_extension, / app/verified_updates, /app/kaspersky_mail, /app/zarafa, /app/zarafa_community, /app/zarafa_professional, /app/zarafa_small_business/app/antispam_updates, /app/remote_backup, /app/security_audit, /app/active_directory, /app/dynamic_vpn, /app/ antimalware_updates, /app/content_filter_updates, /app/intrusion_protection_updates, /app/system_monitor, /app/clearbox300, /app/ account_synchronization, /app/central_management, /app/clearcenter, /app/marketplace, /app/registration, /app/suva, /app/ dynamic_dns, /app/google_apps, /app/kaspersky_file, /app/kaspersky_gateway

B

Just a little technical note on why this is problematic in the 6.x architecture. With 6.x we implemented the best practice of group based rights across the board. We also adopted the paradigm that multiple servers should be able to exist on the same network. The problem that arises then is the separation of rights and the ability to make an administrator exist on one machine but not the other. We know HOW to address this but there is a fair amount of programming to make this happen.

As you can see from Ben's post, the framework for administration exists but we need to get the app built.

Wow. Thanks for such a detailed answer. I'll try and implement it tomorrow or Monday. Thanks.

awesome, I really need this - needed to give the principal of a school ability to add/remove students and manage passwords.

thanks a bunch it works a treat

Just a clarification (took me two goes to get it right... RTFM!!! )

example:

Works perfectly - many thanks

excellent! Thanks a bunch.

Hi,
This works but is not really userfriendly.

Is there a way to give a subadmin access to everything?

I am currently not able to gain access to Memory and System load reports. What are the name of those apps?


/Sven

Perhaps the following works?


Memory and load report is /app/resource_reports