Giving a simple user administrativ privilages

[Noa Harel_1]

Hi
I need help in something quiet simple (I Hope )
I want to give to simple user the privilege to copy hidden files (.profile and so on) to a home directory of other simple users, and change the ownership of the Home directory to the other user's username.

I'm working on un HPUX-11 system with 500 users.
The reason I need it - is that I???m planning to pass all user management to the organizational Help desk.

Thank you!

[Sukant Naik]

Hi,

Please use the utility sudo.

This allows you to define user groups, whom you can assign privileges.

-Sukant

[Daimian Woznick · Accepted solution]

Along with sudo, you could also use Service Control Manager, SUID Shell Scripts (would not suggest it though), and Restricted SAM.

If you are looking at handing over all the user management to the Helpdesk you may also require a way to reset passwords and enable accounts.

You can find sudo here:

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

You can find Service Control Manager here:

http://www.software.hp.com/NSM_products_list.html


The best thing about Service Control Manager (other than being free) is that you can incorporate other system and network management tasks into it.

[Geert Scholten]

I think sukant means the utility su
su -

Give the administrator the grouprights the users also have
/etc/group

[Nick Wickens]

Actually considering that you want to pass all user management over to your helpdesk then sukant is correct in suggesting sudo as this will allow you to give the required root permissions to setup new users, delete users , grant new/forgotten passwords, reactivate passwords etc etc.

Install sudo from the binary listed above and then look at the man pages thus available for sudo and sudousers.

[Carlo Henrico_1]

Noa

I have succesfully implemented restricted SAM for this as Domian suggests.

Create the user first, then using "sam -r" first remove any functions the user should not have then only add those they should have. This way you can make sure that all files etc are in place that the "simple user" would need to perform. ;)

Cheers

Carlo