Skip navigation
³»¿ë¾ø½¿
¹Ù·Î°¡±âÆíÁý
ÀÚÀ¯°Ô½ÃÆÇ
ÇÑÁÙ
QnA
Job
Life
¾÷üȫº¸
DIY
¾ð¹Ú½Ì
NAS
µö·¯´×
°¡»óÈ
Çϵå¿þ¾î
³×Æ®¿÷
RAID
°ÁÂ
ÀÚ·á
BMT
ÈÆÈÆ
ÆǸÅ
±¸¸Å
°ßÀû
ÇØ¿Ü
Ãâ¼®
¹Ù·Î
¹Ù·Î°¡±âÆíÁý
member_id
password
Auto
Login
ȸ¿ø°¡ÀÔ
¾ÆÀ̵ðã±â
¸ñ·Ï
¾²±â
¸ñ·Ï
º¸¾È Á¢±Ù ¾î¶»°Ô ÇØ¾ß ÇÒ±î¿ä? su ±ÇÇÑ ¹®Á¦
Çà¾Æ¹ü
2014-04
2014-04-28 15:17:49
Á¶È¸ 3560 Ãßõ 0
현재 리눅서 서버이고 개발자가 서버에 붙을 때 AD계정으로 로그인할 수 있도록 연동되어 있는 상태입니다.
1. 서비스계정이 다음과 같구요.
- srv-a
- srv-b
- srv-c
2. 개발자계정
- dev-a
- dev-b
- dev-c
dev-a 개발자계정으로 "su - srv-a" 이렇게만 허용가능하도록 하고 싶습니다.
당연히 "su - srv-b", "su - srv-c" 못하도록 막고 싶구요.
특정유저가 특정유저로만 su 권한을 부여 할 수 있는 방법 있을 까요?
ªÀº±Û Àϼö·Ï ½ÅÁßÇÏ°Ô.
¿¥ºê¸®¿À
2014-04
±Û½ê¿ä sudoers ¸Å´º¾óÀ» º¸´Â°Ô Á¦ÀÏ ³´Áö ½Í±º¿ä.
±Û½ê¿ä sudoers ¸Å´º¾óÀ» º¸´Â°Ô Á¦ÀÏ ³´Áö ½Í±º¿ä.
zepinos±èÁ¾È
2014-04
Æнº¿öµå¸¦ ÇØ´ç ¼ºñ½º °èÁ¤¸¸ ¾Ë·ÁÁÖ´Â °Í ¿Ü¿¡´Â...
ÀÏ´Ü sudo ·Î´Â ¾ÈµË´Ï´Ù. sudo ´Â super user ±ÇÇÑÀ¸·Î ó¸®Çϱ⠶§¹®¿¡ ÀÏ´Ü ±ÇÇÑ È¹µæÇÏ¸é ¾î¶»°Ôµç ´Ù¸¥ °èÁ¤ Á¢±Ù °¡´ÉÇÕ´Ï´Ù.
Æнº¿öµå¸¦ °¢ÀÚ¿¡°Ô µû·Î ¾Ë·ÁÁְųª, ÆÄÀÏÀ̳ª µð·ºÅ丮 ±ÇÇÑÀ» ±×·ìÀ¸·Î Àß ÁöÁ¤ÇÏ°í, °³¹ßÀÚ°èÁ¤¿¡µµ ÇØ´ç ±×·ì¿¡ Æ÷ÇÔ½ÃÄÑ ÀÛ¾÷½ÃÅ°´Â ¹æ¹ýµµ ÀÖ½À´Ï´Ù.
Æнº¿öµå¸¦ ÇØ´ç ¼ºñ½º °èÁ¤¸¸ ¾Ë·ÁÁÖ´Â °Í ¿Ü¿¡´Â... ÀÏ´Ü sudo ·Î´Â ¾ÈµË´Ï´Ù. sudo ´Â super user ±ÇÇÑÀ¸·Î ó¸®Çϱ⠶§¹®¿¡ ÀÏ´Ü ±ÇÇÑ È¹µæÇÏ¸é ¾î¶»°Ôµç ´Ù¸¥ °èÁ¤ Á¢±Ù °¡´ÉÇÕ´Ï´Ù. Æнº¿öµå¸¦ °¢ÀÚ¿¡°Ô µû·Î ¾Ë·ÁÁְųª, ÆÄÀÏÀ̳ª µð·ºÅ丮 ±ÇÇÑÀ» ±×·ìÀ¸·Î Àß ÁöÁ¤ÇÏ°í, °³¹ßÀÚ°èÁ¤¿¡µµ ÇØ´ç ±×·ì¿¡ Æ÷ÇÔ½ÃÄÑ ÀÛ¾÷½ÃÅ°´Â ¹æ¹ýµµ ÀÖ½À´Ï´Ù.
俵Áø
2014-04
ƯÁ¤±×·ìÀ» »ý¼ºÇÏ¿© ÇÊ¿äÇÑ ºÎºÐµéÀ» ÇØ´ç±×·ìÀ¸·Î Æ۹̼ÇÁ¶Á¤Çϰųª
sudo ¼³Á¤ÆÄÀÏ¿¡¼ ƯÁ¤¸í·É¾î¸¸ »ç¿ëÇÒ ¼ö ÀÖ°Ô Á¶Á¤ÇÏ½Ã¸é µË´Ï´Ù.
xxx@xxx-xx-xx-x:~ % sudo su - xxxx
Password:
Sorry, user xxx is not allowed to execute '/usr/bin/su - xxxx' as root on xxx-xxx-xx-x.
xxx@xxx-xx-xx-x:~ % sudo su - kkk
$ whoami
kkk
ƯÁ¤±×·ìÀ» »ý¼ºÇÏ¿© ÇÊ¿äÇÑ ºÎºÐµéÀ» ÇØ´ç±×·ìÀ¸·Î Æ۹̼ÇÁ¶Á¤Çϰųª sudo ¼³Á¤ÆÄÀÏ¿¡¼ ƯÁ¤¸í·É¾î¸¸ »ç¿ëÇÒ ¼ö ÀÖ°Ô Á¶Á¤ÇÏ½Ã¸é µË´Ï´Ù. xxx@xxx-xx-xx-x:~ % sudo su - xxxx Password: Sorry, user xxx is not allowed to execute '/usr/bin/su - xxxx' as root on xxx-xxx-xx-x. xxx@xxx-xx-xx-x:~ % sudo su - kkk $ whoami kkk
ºí·¢Ä¿ÇÇ
2014-04
sudo·Î °¡´ÉÇÏ°í¿ä.
¾Æ·¡ »ùÇà º¸½Ã°í ¿øÇϽô ¹æÇâÀ¸·Î ¼³Á¤ÇÏ½Ã¸é µÉ µí ÇÕ´Ï´Ù.
http://www.sudo.ws/sudo/sample.sudoers
sudo·Î °¡´ÉÇÏ°í¿ä. ¾Æ·¡ »ùÇà º¸½Ã°í ¿øÇϽô ¹æÇâÀ¸·Î ¼³Á¤ÇÏ½Ã¸é µÉ µí ÇÕ´Ï´Ù. http://www.sudo.ws/sudo/sample.sudoers
Çà¾Æ¹ü
2014-04
´äº¯ ¸ðµÎ °¨»çÇÕ´Ï´Ù.
´äº¯ ¸ðµÎ °¨»çÇÕ´Ï´Ù.
·Î±×ÀÎ ÇÏ½Ã¸é ´ñ±ÛÀ» ³²±æ ¼ö ÀÖ½À´Ï´Ù
¸ñ·Ï
¾²±â
¸ñ·Ï
QnA
¾²±â
3081/5660
¹øÈ£
Á¦¸ñ
Page 3081/5660
±Û¾´ÀÌ
³¯Â¥
Á¶È¸
̵̧
(±¤°í) ´ÜÅë¹ý ½Ã´ëÀÇ ÀÎÅͳݰ¡ÀÔ °¡À̵å(ver2.0)
(228)
¹é¸Þ°¡
2015-12
1419057
25
(±¤°í) ´ÜÅë¹ý ½Ã´ëÀÇ ÀÎÅͳݰ¡ÀÔ °¡À̵å(¡¦
(228)
2015-12 1419057
1
¹é¸Þ°¡
[Çʵ¶] óÀ½ ¿À½Ã´Â ºÐÀ» À§ÇÑ ¾È³»
(724)
Á¤ÀºÁØ1
2014-05
4879896
0
[Çʵ¶] óÀ½ ¿À½Ã´Â ºÐÀ» À§ÇÑ ¾È³»
(724)
2014-05 4879896
1
Á¤ÀºÁØ1
51588
±¤ÄÉÀ̺íÀ» 1G UTP·Î ¹Ù²ãÁÖ´Â °ÍÀÌ ÀÖ³ª¿ä?
(12)
ȸ¿øK
2014-07
14192
0
±¤ÄÉÀ̺íÀ» 1G UTP·Î ¹Ù²ãÁÖ´Â °ÍÀÌ ÀÖ³ª¡¦
(12)
2014-07 14192
1
ȸ¿øK
51587
¼¹ö¿ëÄÄÇ»Å͸¦ ¹¹¶ó°í ºÎ·¯³ª¿ä?
(14)
Å×µ¹¾ÆÀÌ
2014-07
4377
0
¼¹ö¿ëÄÄÇ»Å͸¦ ¹¹¶ó°í ºÎ·¯³ª¿ä?
(14)
2014-07 4377
1
Å×µ¹¾ÆÀÌ
51586
RAID 1¿¡µµ write-back cache°¡ ÀÖÀ¸¸é ¼º´É Çâ»óÀÌ ÀÖ³ª¿ä?
(5)
Larry
2014-07
5368
0
RAID 1¿¡µµ write-back cache°¡ ÀÖÀ¸¸é ¼º¡¦
(5)
2014-07 5368
1
Larry
51585
UPS Ãßõ ºÎŹµå¸³´Ï´Ù.
(6)
VSPress
2014-07
7631
0
UPS Ãßõ ºÎŹµå¸³´Ï´Ù.
(6)
2014-07 7631
1
VSPress
51584
Windows7¿¡¼ Hyper-V »ç¿ëÀÌ ºÒ°¡´É ÇÑ°¡¿ä?
(13)
KPD
2014-07
8188
0
Windows7¿¡¼ Hyper-V »ç¿ëÀÌ ºÒ°¡´É ÇÑ°¡¡¦
(13)
2014-07 8188
1
KPD
51583
Çʸ§ ÄÉÀÌºí¿¬°á¹æ¹ý ¹®ÀÇ µå¸³´Ï´Ù.
(2)
¸Å¾²TM
2014-07
10368
0
Çʸ§ ÄÉÀÌºí¿¬°á¹æ¹ý ¹®ÀÇ µå¸³´Ï´Ù.
(2)
2014-07 10368
1
¸Å¾²TM
51582
Dell Raid Controller Áß¿¡¼¿ä~
(4)
µà¿ìÅ©
2014-07
4037
0
Dell Raid Controller Áß¿¡¼¿ä~
(4)
2014-07 4037
1
µà¿ìÅ©
51581
ÇÚµåÆù Á¶°Ç ÀÌ»óÇÑ°¡¿ä?
(5)
ÁÖȲº°
2014-07
4288
0
ÇÚµåÆù Á¶°Ç ÀÌ»óÇÑ°¡¿ä?
(5)
2014-07 4288
1
ÁÖȲº°
51580
OEMDRV ¶ó´Â À̵¿µå¶óÀ̺갡 »ý±â´Âµ¥ ¹º°¡¿ä?
(3)
Å×µ¹¾ÆÀÌ
2014-07
6882
0
OEMDRV ¶ó´Â À̵¿µå¶óÀ̺갡 »ý±â´Âµ¥ ¹º¡¦
(3)
2014-07 6882
1
Å×µ¹¾ÆÀÌ
51579
RAID5¸¦ ±¸¼ºÇÏ·Á¸é Çϵåµð½ºÅ© 3°³¸¸ ÀÖÀ¸¸é µÇÁö ¾Ê³ª¿ä??
(15)
dotlee
2014-07
6132
0
RAID5¸¦ ±¸¼ºÇÏ·Á¸é Çϵåµð½ºÅ© 3°³¸¸ ÀÖ¡¦
(15)
2014-07 6132
1
dotlee
51578
z820¿¡ Äõµå·Î K5000 SLI ±¸¼º °¡´ÉÇÒ±î¿ä?
(6)
Á¦½ºÆÛÁî
2014-07
6012
0
z820¿¡ Äõµå·Î K5000 SLI ±¸¼º °¡´ÉÇÒ±î¿ä?
(6)
2014-07 6012
1
Á¦½ºÆÛÁî
51577
p5k-se/epu º¸µå Á¦¿ÂL5420 ¹ÙÀÌ¿À½º Áú¹®µå¸³´Ï´Ù.
(1)
Ä«¶ûÄ«¶û
2014-07
5813
0
p5k-se/epu º¸µå Á¦¿ÂL5420 ¹ÙÀÌ¿À½º Áú¹®¡¦
(1)
2014-07 5813
1
Ä«¶ûÄ«¶û
51576
°ø±â¼øȯ±â Ãßõ ºÎŹµå¸³´Ï´Ù.
(5)
À̺´ÇÑ
2014-07
8105
0
°ø±â¼øȯ±â Ãßõ ºÎŹµå¸³´Ï´Ù.
(5)
2014-07 8105
1
À̺´ÇÑ
51575
·¹À̵å ÀåÂøµÈ ÇÏµå »óÅÂÈ®Àιý
(3)
metaljw
2014-07
6769
0
·¹À̵å ÀåÂøµÈ ÇÏµå »óÅÂÈ®Àιý
(3)
2014-07 6769
1
metaljw
51574
dell perc h310 ·¹À̵åÄÁÆ®·²·¯ ÄÉÀ̺í Áú¹®µå¸³´Ï´Ù.
(1)
DaVinci
2014-07
5540
0
dell perc h310 ·¹À̵åÄÁÆ®·²·¯ ÄÉÀ̺í Áú¡¦
(1)
2014-07 5540
1
DaVinci
51573
´Ü¼ø sata Æ÷Æ® È®Àå¿ëÀ¸·Î ±¦ÂúÀº Ä«µå ¾ø³ª¿ä?
(9)
ÀÌÀÌÅ©
2014-07
4691
0
´Ü¼ø sata Æ÷Æ® È®Àå¿ëÀ¸·Î ±¦ÂúÀº Ä«µå ¡¦
(9)
2014-07 4691
1
ÀÌÀÌÅ©
51572
On-Board LAN Port Åë½Å¼Óµµ Ç¥½Ã ±â´ÉÀÌ ÀÖ´Â ¼¹ö¸¦ ¾Ë°í ½Í½À´Ï´Ù.
(6)
Á¾À±
2014-07
4093
0
On-Board LAN Port Åë½Å¼Óµµ Ç¥½Ã ±â´ÉÀÌ ¡¦
(6)
2014-07 4093
1
Á¾À±
51571
¹Ì»ý¹°¿¡µµ ¾Ï,¼ö ±¸º°ÀÌ ÀÖ³ª¿ä?
(10)
¾Æ¸§´Ù¿î³ëÀ»
2014-07
4793
0
¹Ì»ý¹°¿¡µµ ¾Ï,¼ö ±¸º°ÀÌ ÀÖ³ª¿ä?
(10)
2014-07 4793
1
¾Æ¸§´Ù¿î³ëÀ»
51570
x9scm-f ¸¦ »ç¿ëÁßÀÔ´Ï´Ù .µà¾ó·£Áß Çϳª°¡ esxi ¿¡¼...
(1)
±ÝÄáÄ¿ÇÇ
2014-07
3316
0
x9scm-f ¸¦ »ç¿ëÁßÀÔ´Ï´Ù .µà¾ó·£Áß Çϳª¡¦
(1)
2014-07 3316
1
±ÝÄáÄ¿ÇÇ
51569
À̽½¸² SV5-2500¹®ÀÇ
(3)
comduck
2014-07
3758
0
À̽½¸² SV5-2500¹®ÀÇ
(3)
2014-07 3758
1
comduck
3081
(current)
3082
3083
3084
3085
3086
3087
3088
3089
3090
3081
(current)
3082
3083
3084
3085
¸ñ·Ï
¾²±â
sfl
Á¦¸ñ
³»¿ë
Á¦¸ñ+³»¿ë
ȸ¿ø¾ÆÀ̵ð
ȸ¿ø¾ÆÀ̵ð(ÄÚ)
À̸§
À̸§(ÄÚ)
stx
sop
and
or
°Ë»ö
ÀÏ´Ü sudo ·Î´Â ¾ÈµË´Ï´Ù. sudo ´Â super user ±ÇÇÑÀ¸·Î ó¸®Çϱ⠶§¹®¿¡ ÀÏ´Ü ±ÇÇÑ È¹µæÇÏ¸é ¾î¶»°Ôµç ´Ù¸¥ °èÁ¤ Á¢±Ù °¡´ÉÇÕ´Ï´Ù.
Æнº¿öµå¸¦ °¢ÀÚ¿¡°Ô µû·Î ¾Ë·ÁÁְųª, ÆÄÀÏÀ̳ª µð·ºÅ丮 ±ÇÇÑÀ» ±×·ìÀ¸·Î Àß ÁöÁ¤ÇÏ°í, °³¹ßÀÚ°èÁ¤¿¡µµ ÇØ´ç ±×·ì¿¡ Æ÷ÇÔ½ÃÄÑ ÀÛ¾÷½ÃÅ°´Â ¹æ¹ýµµ ÀÖ½À´Ï´Ù.
sudo ¼³Á¤ÆÄÀÏ¿¡¼ ƯÁ¤¸í·É¾î¸¸ »ç¿ëÇÒ ¼ö ÀÖ°Ô Á¶Á¤ÇÏ½Ã¸é µË´Ï´Ù.
xxx@xxx-xx-xx-x:~ % sudo su - xxxx
Password:
Sorry, user xxx is not allowed to execute '/usr/bin/su - xxxx' as root on xxx-xxx-xx-x.
xxx@xxx-xx-xx-x:~ % sudo su - kkk
$ whoami
kkk
¾Æ·¡ »ùÇà º¸½Ã°í ¿øÇϽô ¹æÇâÀ¸·Î ¼³Á¤ÇÏ½Ã¸é µÉ µí ÇÕ´Ï´Ù.
http://www.sudo.ws/sudo/sample.sudoers