topic Re: Role Based Access Control in Operating System - HP-UX

Role Based Access Control

Jesus Tobon — Fri, 02 Nov 2001 18:39:42 GMT

In Sun Solaris there is a way to create root equivalents. This can be done using Role Based Access Control (RBAC). I'm trying to set up a user in HP-UX with a kind of group administrator role (In order to change attributes to files and directories, and other small things). There is any RBAC thing in HP-UX?
Or there is any other way to accomplish this task???

Re: Role Based Access Control

Patrick Wallek — Fri, 02 Nov 2001 18:45:58 GMT

Nope, No Role Based stuff in HP-UX. As far as I know, that is purely a Solaris 8 thing.

The closest thing I can think of is set up sudo (free) or PowerBroker ($$$$ from Symark) so that the various users can do what they need to do without actually logging in as root.

Re: Role Based Access Control

Bernie Vande Griend — Fri, 02 Nov 2001 18:51:03 GMT

HP has nothing built in to do this.

Sudo is an freeware option.
Symark's PowerBroker is a pretty decent way to do this as it doesn't change the kernel in order to operate.
Computer Associate's has a product called Access Control which also does this exact thing. It is not cheap though and does integrate with the kernel. In fact, that product even allows you to change the access for the root user itself.

Re: Role Based Access Control

Sanjay_6 — Fri, 02 Nov 2001 18:52:21 GMT

Hi,

Like Patrick said, you can use sudo or powerbroker. If you only want the user to change file permissions and such. add the user to all the group of users for whom you want to allow this capability.

Am i making sense.

hope this helps.

Regds

Re: Role Based Access Control

harry d brown jr — Fri, 02 Nov 2001 19:31:23 GMT

Write a perl script. It insures you give them what they need while protecting your system.

live free or die
harry

Re: Role Based Access Control

Michael Tully — Fri, 02 Nov 2001 19:39:11 GMT

Hi,

Your best bet is get 'sudo' which the best
part of it is that is free. It is really
simple to use and setup.

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.2b1/

Or you can get the source code from

www.courtesan.com/sudo

HTH
-Michael

Re: Role Based Access Control

harry d brown jr — Fri, 02 Nov 2001 19:52:53 GMT

Or you can get brave and turn on ACL's. But you'll hpux 11 or greater, with jfs 3.3.

live free or die
harry

Re: Role Based Access Control

Edward Finneran — Thu, 19 Dec 2002 14:53:32 GMT

or, if the function you're trying to delegate is one provided by sam, you can use sam functions to allow a designated set of non-root users access to that specific function or functions only via sam.