Running InfoPrint Manager Update Server service as a different user

The InfoPrint Manager update server can be set up to run as a different user update automatically.

By default, InfoPrint Manager Update Server is run using the ipmupdate user.

To run the service as a different user follow these steps:

  1. Create a different user than ipmupdate to run InfoPrint Manager Update Server service, if it is not already created.
    Note: The shell for the user can also be /sbin/nologin, /bin/false not necessarily /bin/bash or any interactive shell
  2. Make sure that ipmupdategroup is the primary group for the new user. If not, execute this command to change the primary group:
    usermod -g ipmupdategroup new-user

    Where new-user is the user newly created.

  3. Stop the service using this command:
    systemctl stop ipmupdateserver
  4. Disable the service using this command:
    systemctl disable ipmupdateserver
  5. Change the owner for directory /var/log/ipmupdateserver:
    chown -R new-user:ipmupdategroup /var/log/ipmupdateserver

    Where new-user is the user newly created.

    Note: If SSL/TLS is used by ipmupdateserver, make sure that the new user can read the SSL key and certificate files. Also, make sure that the new user can read configuration files found in /etc/ipmupdateserver directory.
  6. Create directory /etc/systemd/system/ipmupdateserver.service.d using this command:
    mkdir /etc/systemd/system/ipmupdateserver.service.d
  7. Add the user directive to the /etc/systemd/system/ipmupdateserver.service.d/override.conf file:
    [Service]
    User=new-user
    
  8. Reload the system using this command:
    systemctl daemon-reload
  9. Re-enable the service using this command:
    systemctl enable ipmupdateserver
  10. To start the InfoPrint Manager Update Server service, run systemctl start ipmupdateserver.
Note: Do not remove the ipmupdate user as it will be created the next time you update InfoPrint Manager Update Server rpm package.