From owner-freebsd-questions@FreeBSD.ORG Wed Sep 5 18:08:35 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 17FA416A417 for ; Wed, 5 Sep 2007 18:08:35 +0000 (UTC) (envelope-from mnslinky@gmail.com) Received: from wx-out-0506.google.com (wx-out-0506.google.com [66.249.82.234]) by mx1.freebsd.org (Postfix) with ESMTP id 8AB1A13C469 for ; Wed, 5 Sep 2007 18:08:34 +0000 (UTC) (envelope-from mnslinky@gmail.com) Received: by wx-out-0506.google.com with SMTP id i29so1969474wxd for ; Wed, 05 Sep 2007 11:08:14 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=ir+FWnU2jn6e/UCAKWSu/YQyQmHtWKeowbQfe/aSFf9a8npxOZgNBOGG3KyB9VOm2JuKtdqfFadTU1/7rgHbNl3SHB70JhtV/OOtDXGuyXU07OtPPX00ZxpJy0hLbqKJIb/XeldQzq/ojjBgJPRcFOBTx1AUTuuD1trKrMM9zuU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:in-reply-to:references:mime-version:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=fyq1RdCCbu9H6RfxW5FHcI9rqnyQPOdCI9IEMZgZg+e5krZLQMIlhsU1qXXlYpnw3/tcHfSGrj+cPjkwFTN//TAXBQVe4oOW3eQKYcrqINYUuxM6TnFXexYSaramT+us3r0k0WwSdG2DwG093l10QhZnkORLPD8YyWgFkpVm4D0= Received: by 10.90.113.18 with SMTP id l18mr7462294agc.1189015692232; Wed, 05 Sep 2007 11:08:12 -0700 (PDT) Received: from ?10.0.0.14? ( [74.95.66.25]) by mx.google.com with ESMTPS id f55sm9272767pyh.2007.09.05.11.08.11 (version=SSLv3 cipher=OTHER); Wed, 05 Sep 2007 11:08:11 -0700 (PDT) In-Reply-To: <46DECD4F.3050408@chamonix.reportlab.co.uk> References: <46DECD4F.3050408@chamonix.reportlab.co.uk> Mime-Version: 1.0 (Apple Message framework v752.3) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <69951ED3-5B8F-4D00-8920-BFF278C68DE6@gmail.com> Content-Transfer-Encoding: 7bit From: Eric Crist Date: Wed, 5 Sep 2007 13:08:08 -0500 To: Robin Becker X-Mailer: Apple Mail (2.752.3) Cc: freebsd-questions@freebsd.org Subject: Re: temporary su login X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Sep 2007 18:08:35 -0000 On Sep 5, 2007, at 10:37 AMSep 5, 2007, Robin Becker wrote: > My collocation supplier is about to move our FreeBSD box and wants > some way to shut it down cleanly. Is there a simple way to allow a > non-root user to have shutdown rights without just giving them the > world. At present I don't even allow login via ssh on that box ie > it's purely key based. > I'm sure nobody will mention this, so I will. On most systems with support ACPI, your colo provider can simply press the power button on the front of your server. FreeBSD's kernel will pick up the signal and shut down cleanly. Once you're moved, they can press the same button to power the system on. There is *NO* need to give them login access to the box. Also, they could simply call you to have you shut it down. ----- Eric F Crist Secure Computing Networks