topic Re: new user roll as root in Operating System - HP-UX

new user roll as root

Fauziah Mahdan — Wed, 16 Feb 2005 01:47:20 GMT

Hi, we create new user using SAM and set his primary group as users. Under root and dba groups we add this new user. But we can't create and also ftp file. Why?

Re: new user roll as root

piyut_1 — Wed, 16 Feb 2005 02:00:22 GMT

sorry,

u want to create file??
your new user is under root and dba groups, so u have privlege as root.

thanks

Re: new user roll as root

Fauziah Mahdan — Wed, 16 Feb 2005 02:05:38 GMT

yup..and that is why we are confuse here. We can create using vi....save as :wq!

Then try to ftp one file which is under dba group also can't, the error appear as permission denied after we run put filename command.

Re: new user roll as root

Robert-Jan Goossens — Wed, 16 Feb 2005 02:12:31 GMT

Hi,

Could you post the output from

# id user

Robert-Jan

Re: new user roll as root

Fauziah Mahdan — Wed, 16 Feb 2005 02:33:47 GMT

HI all,

just retry again ok! :-) Ok to create and also to ftp. Does it takes time to work? Coz we try directly after create the user before lunch, can't and now ok already. Thanks

Ok another issue regarding new user@root. 1) We have to compile some oracle form .fmb format to execute file .fmx. Already set this user as oinstall group but can't compile. Error as:

$ ./compile_file.sh gs_cancel.fmb
f60gen Module=gs_cancel.fmb Userid=xxx/xxx@devp Module_Type=FORM Batch=NO Comp
ile_All=YES
FRM-91500: Unable to start/complete the build.
----> Error compiling gs_cancel.fmb : 1

Finished compiling 1 program(s).

$ ll gs_cancel
gs_cancel not found
$ ll gs_cancel.fmb
-rwxrwxrwx 1 nazly oinstall 53248 Nov 29 17:48 gs_cancel.fmb

2) Is there a log file to capture every user in HP-ux in details, like edit,create,delete file? We do check the sulog its only log all users who log to the server on particular day.

Thanks

Re: new user roll as root

Robert-Jan Goossens — Wed, 16 Feb 2005 02:38:39 GMT

if you add user to a group, the user will need to relogin again to get the extra group.

Robert-Jan

Re: new user roll as root

Fauziah Mahdan — Wed, 16 Feb 2005 21:17:03 GMT

Hi all,
question again regarding new user @ root.
I create my id as root but I can't run nickel. Why? Is there any missing priviledge should I add?

b1:/home/fauziahm# id
uid=107(fauziahm) gid=3(sys)
b1:/home/fauziahm# cd /opt/contrib/bin
b1:/opt/contrib/bin# ll
total 1364
-r-xr-xr-x 1 root sys 78008 May 13 2003 nickel

b1:/opt/contrib/bin# nickel

ERROR: Your User ID appears to be: 107 (Loginname: fauziahm)

Sorry, but you must have root privileges to run this script.

b1:/opt/contrib/bin#

Re: new user roll as root

piyut_1 — Wed, 16 Feb 2005 21:41:57 GMT

try to add your user in root group

Re: new user roll as root

Rashid Hamid — Wed, 16 Feb 2005 22:15:34 GMT

Hi Fauziah

From the permission it shows that the userid can run the nickel script because it fall under sys group.
Why not try to run nickel using root.

Regards
Rashid Hamid

Re: new user roll as root

Fauziah Mahdan — Thu, 17 Feb 2005 21:19:25 GMT

Hi Rashid,
my intention to create another id as root is everybody using their own id and root can monitor any activity they did. In other word, no user is using root as root is purposely for administrator. This is for security issue. If I run the nickel using root np purpose for me to create new user as = root rite'?

So my next project is to find any log file that trace everybody login to server include their activity such as edit,delete,remove,and etc. The sulog is only trace who is login to the server rite'?
Anyone can advice...Is it audit log?
How to switch it on?

Thanks all