- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: su restrictions on HPUX 11.23
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 01:27 AM
07-03-2011 01:27 AM
su restrictions on HPUX 11.23
Hi,
We need to enable passwords for root users when using su like "joroot" user has UID 0 or equivalent to root user. "joroot" can use "su - root" without password.
Query is if "joroot" is applying command "su - root", it must be prompt for password.
Thanks & Kind Regards,
Muhammad Ali
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:09 AM
07-03-2011 02:09 AM
Re: su restrictions on HPUX 11.23
Since joroot has UID 0, it IS root and there is no need to do su nor check passwords.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:17 AM
07-03-2011 02:17 AM
Re: su restrictions on HPUX 11.23
Hi,
Still is there any possibility when joroot try to use "su - root" then it prompts for root password?
we need to implement this restriction as our internal requirement.
Thanks & Kind Regards,
Muhammad Ali
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:22 AM
07-03-2011 02:22 AM
Re: su restrictions on HPUX 11.23
Even if it asked for a password, joroot would simply never use su since he IS root already.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:26 AM
07-03-2011 02:26 AM
Re: su restrictions on HPUX 11.23
Hi,
i do not sure what are you trying to achive.
joroot itself UID 0 and why you need su - and next step asking for password?
once the user owned UID 0, they can do anything event you put marvellous script such asking password su -, they can revert back.
Thanks
BR
Naj
____________________________________________
:: Really appreciate if you could assign some points.
:: Don't know how to assign point? Click the KUDOS! star!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:33 AM
07-03-2011 02:33 AM
Re: su restrictions on HPUX 11.23
Hi,
I know joroot has UID 0. But some users used to su - root and perform some tasks although they can use their userid like joroot since we want to monitor joroot activity but we are unable to track when they perform administrative tasks by using su - root.
That's why we want to restrict joroot to prompt for a password when using su - root.
Thanks & Kind Regards,
Muhammad Ali
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:42 AM
07-03-2011 02:42 AM
Re: su restrictions on HPUX 11.23
Did joroot one of sudo user?
could you please be more specific what task that joroot not be perform?
Thanks
BR
Naj
____________________________________________
:: Really appreciate if you could assign some points.
:: Don't know how to assign point? Click the KUDOS! star!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:44 AM
07-03-2011 02:44 AM
Re: su restrictions on HPUX 11.23
How are you monitoring joroot activity?
Perhaps you should be using a management tool and not a software tool to manage your rogue sysadmins?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:51 AM
07-03-2011 02:51 AM
Re: su restrictions on HPUX 11.23
Hello,
Thanks for your reply.
Is there possiblity in hpux to prompt for a password when any user having uid 0 use su - root ?
if not then how to disable su?
Thanks & Kind Regards,
Muhammad Ali
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-03-2011 02:54 AM
07-03-2011 02:54 AM
Re: su restrictions on HPUX 11.23
Hi,
By Audit trail.
Kindly suggest which management tool we can use to monitor root users activity?
Thanks & Kind Regards,
Muhammad Ali