Skip to Content
-1

adm login rights on Linux?

Mar 05 at 06:06 PM

39

avatar image
Former Member

I have what I think is a very simple question.

Should the <sid>adm account be allowed to login directly on the console or via ssh on Linux? My thought is no, and they the users should sudo to <sid>adm when necessary.

Thanks,
/Raj

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Isaias Freitas
Mar 06 at 11:30 PM
0

Hello Raj,

Yes, sidadm must be allowed to logon directly.

However, it is ok to sudo to sidadm for daily tasks.

The reason why it must be allowed to logon directly is that the sapstartsrv process creates sub-logins (sub-shells) depending on the webmethod that was called. If sidadm is not able to logon, such sub-logins might hang, causing the sapstartsrv process to hang too and not to respond to any webmethod (e.g., stop or start the system).

There can be no additional prompts too (e.g., "press enter to continue").

The SAP Note 1301712 (S-user required) discusses these topics.

Regards,

Isaías

Share
10 |10000 characters needed characters left characters exceeded