topic Re: recommendations for a good setuid program in Operating System - HP-UX

recommendations for a good setuid program

Ken Penland_1 — Tue, 18 Jan 2005 12:38:59 GMT

I have been tasked to find software that will allow users to run scripts as root or any other user without having to become that user first. I know about "sudo" already, but where I work opensource products are not desired, the general belief is the more money spent, the better the product. Does anyone have any suggestions for a product that will work on HPUX 11.00 and 11.11 that allows the admin to set it up so that certain users can run certain scripts as root or another uid?

Any advice would be appreciated.

Ken

Re: recommendations for a good setuid program

Patrick Wallek — Tue, 18 Jan 2005 12:46:43 GMT

Have a look at the software called PowerBroker from Symark.

http://www.symark.com/

PB has excellent logging and will do exactly what you require. It is fairly pricey though, but that sounds like that may be good in your environment.

Re: recommendations for a good setuid program

Ken Penland_1 — Tue, 18 Jan 2005 12:57:02 GMT

yeah, I actually had a demo of that product a few years back...looks pretty good...any others that you have had good experiences with that I might be able to compare to?

Re: recommendations for a good setuid program

Ken Penland_1 — Tue, 18 Jan 2005 15:05:40 GMT

I also seem to recall that powerbroker had a problem working correctly on a Trusted system, does anyone know if this has been corrected?

Re: recommendations for a good setuid program

Chris Vail — Tue, 18 Jan 2005 17:46:24 GMT

We're using powerbroker here. I hate it, but that is probably an implementation issue rather than something with the application itself. Our systems were cobbled together after a major merger, and there are as many exceptions as there are rules.

Sudo is a better product, and less intrusive AFAIC. Combined with ssh you'd have a pretty good system.

Chris

Re: recommendations for a good setuid program

TwoProc — Tue, 18 Jan 2005 18:10:19 GMT

I vote for sudo. Easy enough to put together and implement. Price is right... Free - go look at the porting archive site (search google for "hpux porting archive") to get a version ready to run on HPUX.

Re: recommendations for a good setuid program

Ken Penland_1 — Wed, 19 Jan 2005 14:21:20 GMT

thanks all for your input, I am leaning tward sudo, but have to leave it up to the powers that be.