topic Re: Setting up users admin rights? in Operating System - HP-UX

Setting up users admin rights?

B. Jen — Tue, 14 Jun 2005 15:41:44 GMT

I am new to HP-UX. Is there a way to give a user the basic admin functions? (i.e. reset user's password, delete a print jobs from the print queue)

Thanks in advanced for answers!

Re: Setting up users admin rights?

A. Clay Stephenson — Tue, 14 Jun 2005 15:48:28 GMT

The tool of choice for this is a command called "sudo".

http://gatekeep.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.8p7/

Re: Setting up users admin rights?

Rick Garland — Tue, 14 Jun 2005 15:49:26 GMT

The SUDO tool is the tool of choice.
Can be obtained from http://www.cortsean.com

Other option is to use restricted SAM.

Re: Setting up users admin rights?

DCE — Tue, 14 Jun 2005 15:55:18 GMT

You can assign the basic admin functions you listed via retricted SAM. It is easy to configure and the users will probably appreciate the gui interface.

Dave

Re: Setting up users admin rights?

Senthil Kumar .A_1 — Tue, 14 Jun 2005 16:12:43 GMT

Hi Bernard,

Check the link.. check the excerpt on "restricted SAM" in the link...

http://docs.hp.com/en/B2355-90672/ch01s02.html

Re: Setting up users admin rights?

Senthil Kumar .A_1 — Tue, 14 Jun 2005 16:14:23 GMT

a short note on restricted sam "sam -r" is given at the end ,in the link i posted earlier..

Re: Setting up users admin rights?

piyut_1 — Tue, 14 Jun 2005 23:26:03 GMT

Jen,

u can install sudo software (depot file:/T1471AA_A.03.71.000_HP-UX_B.11.11_32+64.depot).
than u must configure /usr/local/etc/sudo/sudoers.
add the user that u want to grant as root:

# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL
jen ALL=(ALL) NOPASSWD: ALL

after edited that file, user jen can run as root by type command "/usr/local/bin/sudo su -"

hopes this help,

piyut

Re: Setting up users admin rights?

Jino.P.V — Wed, 15 Jun 2005 00:13:12 GMT

Hi Bernad,

the easiest way will be restricted SAM. You can assign different access to desired users.
sam -r
select the desired user
assign the access by enabling it
save the access from action menu

You can also use sudo. With sudo you can assign the privilages as shown..

abcd ALL=ALL
cdfr ALL=ALL
jpkd ALL=ALL,!SHELLS,!SU,!MISC,!SHUTDOWN,! VISUDO

this I took form the file /var/opt/sudo/sudoers. This is the file we need to update. Hope you got info about the s/w from the link others are given..
If you have a great setup you can go for Power broker which is usually aserver/client setup in which you can decide who all should be able to lofin as root

hope this may help you..

Jino

Re: Setting up users admin rights?

piyut_1 — Wed, 15 Jun 2005 22:55:34 GMT

Sorry Jen,

I have make a fault.T1471AA_A.03.71.000_HP-UX_B.11.11_32+64.depot is depot fot secure shell.
for sudo, u can search at hp.com

regards,

piyut