Advanced authentication methods (okta, SSO, etc.) as well as load-balancing require the use of a sudo user. The fastx (web service) user must be given permission to launch sessions for users.

To enable sudo, follow these steps:

  1. If it doesn't already exist (it will, in most modern Linux distributions), make the /etc/sudoers.d directory, and make it mode 750, owned by root.root.
  2. Run visudo as root
  3. Comment out the following line (if it exists):
    #Defaults requiretty
  4. Make sure the following line exists:
    #includedir /etc/sudoers.d
  5. Save the file
  6. Run visudo -f /etc/sudoers.d/fastx as root
  7. Add the following lines:
    Runas_Alias FASTX_USERS = ALL, !%root, !%bin, !%daemon, !%adm, !%mail
    fastx ALL=(FASTX_USERS) NOPASSWD:SETENV: /usr/lib/fastx2/api/start, /usr/lib/fastx2/api/schedule
    			
  8. Save the file