topic Re: Using SAM as a mortal user in Operating System - HP-UX

Using SAM as a mortal user

Mark Harshman_1 — Wed, 30 Nov 2005 12:05:46 GMT

Is there a way, i can set up SAM to give access to a mortal user to add users? Any info would be appreciated. I am running HPUX 11i on a variety of servers.

Re: Using SAM as a mortal user

James R. Ferguson — Wed, 30 Nov 2005 12:09:20 GMT

Hi Mark:

Yes, there is a "restricted" SAM. Run:

# sam -r

...as root to build it for the "mortals".

Regards!

...JRF...

Re: Using SAM as a mortal user

A. Clay Stephenson — Wed, 30 Nov 2005 12:09:41 GMT

Yes. Do a "man sam" and search for "Restricted SAM" with the man pages. It will explain the process.

Re: Using SAM as a mortal user

Jeff_Traigle — Wed, 30 Nov 2005 12:13:37 GMT

You can see if SAM in restricted mode will meet your needs. See sam(1M) regarding Restricted SAM.

For what it's worth, I found this to be not very secure, IMO. You can only restrict the people to areas of SAM, not really what they can do within those areas. Better off using sudo and wrapping a script for designated people to run that will issue the exact useradd command you want them to use. They can't change the behavior and it gets you consistent results.

Re: Using SAM as a mortal user

DCE — Wed, 30 Nov 2005 12:28:40 GMT

Restricted sam can be configured to restrict specified ids to certain functions.

As root run sam -r to get into the configuration options.

The user runs sam, and will only see options you specify for his/her id.