<div dir="ltr">Hi guys,<div>I confirm that it works with `<i>sudo</i>`, but (at least for rhel 8.6) this is what I had to do<br>1) create a "custom" authselect profile (I called it "crac" - see <a href="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_authentication_and_authorization_in_rhel/configuring-user-authentication-using-authselect_configuring-authentication-and-authorization-in-rhel#creating-and-deploying-your-own-authselect-profile_configuring-user-authentication-using-authselect">https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/configuring_authentication_and_authorization_in_rhel/configuring-user-authentication-using-authselect_configuring-authentication-and-authorization-in-rhel#creating-and-deploying-your-own-authselect-profile_configuring-user-authentication-using-authselect</a>)<br>2) load it with "<i><b>sudo authselect select custom/crac</b></i>"<br>3) start springboot application with "sudo"<br><br>There is still something not clear to me, i.e. on rhel 8.6 the default authprofile is "sssd", so probably the following is true<br><br><i>"If you run it without sudo and your non-root user is only available by SSS<br>(NIS?) the workaround will not work."</i><br><br>so, even creating a "custom" profile, I have to run as "sudo".<br><br>Anyway, many thanks for the help, now I can keep going on with it!</div><div><br></div><div>Bye for now<br><br> </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Nov 3, 2022 at 7:36 AM Anton Kozlov <<a href="mailto:akozlov@azul.com">akozlov@azul.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 11/2/22 21:25, Jan Kratochvil wrote:<br>
> <a href="https://mail.openjdk.org/pipermail/crac-dev/2022-January/000079.html" rel="noreferrer" target="_blank">https://mail.openjdk.org/pipermail/crac-dev/2022-January/000079.html</a><br>
> passwd: sss files systemd<br>
> group: sss files systemd<br>
> -><br>
> passwd: files sss systemd<br>
> group: files sss systemd<br>
Thanks for the link.<br>
<br>
Does it help to remove "sss" from the list?<br>
<br>
Thanks,<br>
Anton<br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"><span>GABRIELE</span> <span>CARDOSI</span></p><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:10px;margin:0px 0px 4px;text-transform:uppercase"><span>SENIOR SOFTWARE ENGINEERS, MW</span><span style="color:rgb(170,170,170);margin:0px"></span></p><p style="font-family:overpass,sans-serif;margin:0px;font-size:10px;color:rgb(153,153,153)"><a href="https://www.redhat.com/" style="color:rgb(0,136,206);margin:0px" target="_blank">Red Hat <span>Ltd</span></a></p><p style="font-family:overpass,sans-serif;margin:0px 0px 6px;font-size:10px;color:rgb(153,153,153)"><span style="margin:0px;padding:0px"><a href="mailto:gcardosi@redhat.com" style="color:rgb(0,136,206);margin:0px" target="_blank">gcardosi@redhat.com</a> </span> <span>M: <a href="tel:+39-3461717132" style="color:rgb(0,136,206);font-size:11px;margin:0px" target="_blank">+39-3461717132</a> </span></p><table border="0" style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:medium"><tbody><tr><td width="100px"><a href="https://red.ht/sig" target="_blank"><img src="https://www.redhat.com/files/brand/email/sig-redhat.png" width="90" height="auto"></a></td></tr></tbody></table></div></div>