topic Re: su problem in Operating System - HP-UX

su problem

uadm26 — Tue, 08 Mar 2005 13:23:48 GMT

Hi,

I have a user backora and i need that user do su - oracle without asking for password. can you help?
Thanks.

Re: su problem

Rajeev Tyagi — Tue, 08 Mar 2005 13:26:11 GMT

Joel,

You can use sudo to do that.

Re: su problem

Pete Randall — Tue, 08 Mar 2005 13:28:02 GMT

Joel,

Yes, sudo is your answer:

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.8p6/

Pete

Re: su problem

uadm26 — Tue, 08 Mar 2005 13:28:38 GMT

How Rajeev

Re: su problem

RAC_1 — Tue, 08 Mar 2005 14:57:37 GMT

Install sudo and then set sudoers file (with visudo command)

backora (oracle) ALL= NOPASSWD "su - oracle"

Check man page for details.

Re: su problem

TheJuiceman — Tue, 08 Mar 2005 20:32:05 GMT

If your company frowns on third party software on your system (like mine does), then you can also use restricted-SAM for this. Set backora up so that they are a SAM user (this can be done by running sam -r as root and then adding their ID in as instructed). Then create a Custom App that will execute "su - oracle" as root. Save the profile so that only her ID can run this script. When backora logs in and executes SAM, they can run the new script and it will su them as oracle without needing a password. When they exit out of "oracle", they will return to SAM as their own login.
Doing a "man sam" can help more.

Bob

Re: su problem

TheJuiceman — Tue, 08 Mar 2005 20:34:46 GMT

PS - You could also use Service Control Manager also (but it is not built in to your system...you will have to get it from HP). Then backora could login as oracle from the command line without using a password.

Re: su problem

Mic V. — Tue, 08 Mar 2005 23:40:15 GMT

If you're running an automated ("lights-out") backup script, you could add it to root's crontab (it wouldn't need a password:

0 9 * * 1 /bin/su - oracle -c "runbackupscript.sh"

(Check the syntax)

Mic