Operating System - HP-UX의 주제 Re: roor permission

roor permission

Jayasuntar — Sun, 05 Feb 2006 07:48:54 GMT

Hi all,

As a sysadm, for what are all the purpose example:- checking syslog, monitoring cluster, and pkg logs, -- we need root or equalent permission?

Regards

Jay

Re: roor permission

Shivam Tiwari — Sun, 05 Feb 2006 08:08:24 GMT

Hi Jaya,

ALmost for all viewing commands you dont need root permission but if you want to modify system level application you need root or equivalent permission.

HTH,

Shivam Tiwari

Re: roor permission

Jayasuntar — Sun, 05 Feb 2006 08:16:39 GMT

Hi,

I want to monitor, cluster, syslog, last login successful and failiure attempts, sometimes even changing the user passwd.

Whether is there anyway other than having root equalent user?..

Regards

Jay

Re: roor permission

Shivam Tiwari — Sun, 05 Feb 2006 08:22:56 GMT

Jaya,

You cant have another root user (replica) but what you can do is to assing all the root privelages to a particular but still there will be difference.

You can install any sudo software to give users provileges even at file and directory level that is not possible with the default UNIX commands or to cumboresome to perform. Here you can get the more info
http://www.aplawrence.com/Basics/sudo.html

HTH,

SHivam Tiwari

Re: roor permission

DCE — Sun, 05 Feb 2006 09:50:03 GMT

There are a couple of ways to grant limited root access. One of the most common is to install and configure sudo. This app is quite versitile and you can assign specific commands to an id

It can be downloaded from
http://gatekeep.cs.utah.edu/hppd/hpux/

Another way to grant limited root privledges is via restricted SAM. You can configure SAM (by running sam -r) to give users limited use of features in SAM. This is not as secure as sudo though.

Re: roor permission

Indrajit_1 — Sun, 05 Feb 2006 11:55:15 GMT

Hi;

U need to configure sudo and assign permission for dedicated user to executed those command.

Try this

#visudo
#/usr/local/sbin/visudo

Read the script carefully. u need to assign permission for the user.

for example..

%unix ALL = ALL

user_id Server_name=/usr/sbin/useradd
user_id Server_name=/usr/bin/passwd

etc .. etc..

save and come out...

Hope this will help u to resolve ur issue.

Cheers
Indrajit

Re: roor permission

Shivam Tiwari — Sun, 05 Feb 2006 12:19:57 GMT

Indrajit you are right but Jaya dont get confused if you run these commands and dont get anything as before running these commands you need to install apropriate sudo software.

There are tons of them available you need to install any one of them (they are for free) as they provide almost same funcionality.

HTH,

Shivam Tiwari

Re: roor permission

Jayasuntar — Mon, 06 Feb 2006 03:02:54 GMT

Thks guys..

Got the required answers..

Regards

Jay