topic Re: root privilege in Operating System - HP-UX

root privilege

kacou — Wed, 28 Jan 2009 16:24:10 GMT

i want to give the root privileges to a user 'toto'. How can i configure it?

i need your help please

Re: root privilege

Yashwant — Wed, 28 Jan 2009 16:31:01 GMT

Sudo is good option.

Install sudo first from http://www.gratisoft.us/sudo/intro.html

do "visudo". I have given basic configuration to assigh user 'toto' on machine "HP" to run "su - root" command

Host_Alias SMS=HP

User_Alias SUSER=toto

Runas_Alias ADM = root, !root*

Cmnd_Alias SUROOT=/usr/bin/su -, /usr/bin/su - root

SUSER SMS=(ALL) NOPASSWD: SUROOT

Re: root privilege

Mel Burslan — Wed, 28 Jan 2009 16:34:11 GMT

As suggested above, sudo is the good-enough and free solution. But if you will need any sort of sccountability (for audit purposes and more) you need to look into Symark's PowerBroker application. It is not cheap by any means but does the job perfectly well.

http://www.symark.com

then follow the navigation to PowerBroker product.

Hope this helps

Re: root privilege

Pete Randall — Wed, 28 Jan 2009 16:48:58 GMT

You could also look into using restricted SAM (sam -r), wherein you set the user up as a restricted SAM user who has access to selected SAM functions.

Pete

Re: root privilege

Patrick Wallek — Wed, 28 Jan 2009 16:51:15 GMT

If you are on 11iv2 (11.23) or 11iv3 (11.31) the Role Based Access Control (RBAC) may be an option as well.

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

Re: root privilege

Sp4admin — Wed, 28 Jan 2009 18:46:07 GMT

I agree with the postings above. I wouldn't give root privileges to a user. I would use sudo as stated and just allow the user certain root commands.

sp,