topic Re: How to give root access to a user in Operating System - HP-UX

How to give root access to a user

Grayh — Tue, 07 Oct 2008 14:23:58 GMT

I want to give root access to a user where in he can use all the commands a root can perform... for ex.. useradd,unsermod.. kernal tuning etc..

Re: How to give root access to a user

Tim Nelson — Tue, 07 Oct 2008 14:26:59 GMT

Provide them with the root password

Creating another user with uid of 0 is a waste of time and effort and will only confuse file ownerships, process ownerships etc...

Re: How to give root access to a user

Laurent Menase — Tue, 07 Oct 2008 14:31:40 GMT

su

sudo but need to download it or recompile

RBAC
javascript&colon;openExternal('http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl')

Re: How to give root access to a user

Grayh — Tue, 07 Oct 2008 14:39:14 GMT

I have actually installed RABC... but still the user cannot do a useradd or usermod

Re: How to give root access to a user

Ganesan R — Tue, 07 Oct 2008 14:41:13 GMT

Hi,

su(switch user)is the preferred option. If you change the UID to 0 it has lot of security issues.

You can install and use SUDO alternatively.

Re: How to give root access to a user

Ivan Krastev — Tue, 07 Oct 2008 14:48:52 GMT

There are many ways to do that: sudo, sam.

If you know what exact will be executed from cmd line use sudo.
If you want to restrict to add/modify/delete users, kernel tunning - use restricted SAM.

regards,
ivan

Re: How to give root access to a user

Grayh — Tue, 07 Oct 2008 14:50:23 GMT

Could you give me the full command to add a user " test1 " who has all the root privaleges... like usedadd..usermod..kctune etc..

Re: How to give root access to a user

Patrick Wallek — Tue, 07 Oct 2008 14:53:59 GMT

>>but still the user cannot do a useradd or usermod

What happens when the user tries to run those commands?

Is the user typing 'useradd' and getting an error 'sh: useradd: not found'? If so, then they just need to specify the full path to the command ('/usr/sbin/useradd').

Or is the user getting a 'permission denied' message when attempting to run the command?

Actual messages received when trying the command will help immensely.

Re: How to give root access to a user

Grayh — Tue, 07 Oct 2008 15:14:29 GMT

$ /usr/sbin/useradd
Permission Denied

Re: How to give root access to a user

Ivan Krastev — Tue, 07 Oct 2008 15:27:06 GMT

Can you post the output from id command. Maybe you are not root user.

regards,
ivan

Re: How to give root access to a user

Grayh — Tue, 07 Oct 2008 15:28:55 GMT

$ id test1
uid=110(test1) gid=103(admin)

Re: How to give root access to a user

Grayh — Tue, 07 Oct 2008 15:30:37 GMT

I did the following

$su test1
Password:

$ /usr/sbin/useradd
Permission Denied

$ id test1
uid=110(test1) gid=103(admin)

Re: How to give root access to a user

Dennis Handly — Tue, 07 Oct 2008 15:38:02 GMT

>I have actually installed RABC but still the user cannot do a useradd or usermod

You can't do root commands unless you ARE root or you invoke su, sudo or whatever RABC needs to do these commands.

Re: How to give root access to a user

Ivan Krastev — Tue, 07 Oct 2008 15:38:17 GMT

Have you installed and configured any RBAC, sudo, sam access for that user?
This user (user1) cannot add userr by default - he has not aproppriate permission to edit /etc/passwd, /etc/group ... files.

regards,
ivan

Re: How to give root access to a user

Grayh — Tue, 07 Oct 2008 15:42:37 GMT

So do I need to install sudo and RABC both .... I am confused

Re: How to give root access to a user

Pulse001 — Tue, 07 Oct 2008 15:44:33 GMT

if you hav sudo installed pls check for /etc/sudoers file. I am posting one example line for you.Just add the following line at the end of your sudoers file.

gravh ALL=(ALL) PASSWD: ALL

The user has to login using his own a/c and type sudo su and he will be prompted for his own password once more.

Re: How to give root access to a user

OldSchool — Tue, 07 Oct 2008 15:48:07 GMT

Ok, so you've installed RBAC. Either you've not configured it, or the user is *properly* configured.

I suggest you look here:
http://docs.hp.com/en/5991-8678/ch03s05.html?jumpid=reg_R1002_USEN

Re: How to give root access to a user

Ivan Krastev — Tue, 07 Oct 2008 15:49:36 GMT

If you already has RBAc installed - just config it. See administration guide here - http://docs.hp.com/en/5991-8678/index.html

The easiest way will be to use sudo or restricted sam. Running and installing both RBAC/sudo is not mandatory. Sudo is easiest to install and manage.

regards,
ivan

Re: How to give root access to a user

Laurent Menase — Tue, 07 Oct 2008 15:49:47 GMT

RBAC alone is enough

a user which can call useradd can create his own root account.
So rbac is the best solution.

Re: How to give root access to a user

OldSchool — Tue, 07 Oct 2008 15:51:40 GMT

typo, should have been:

Ok, so you've installed RBAC. Either you've not configured it, or the user is *not properly* configured.

I suggest you look here:
http://docs.hp.com/en/5991-8678/ch03s05.html?jumpid=reg_R1002_USEN

also, configuring another user with root uid is asking for trouble, especially if you forget when removing the user...it is a highly effective way of trashing the system however.

either configure rbac, or let the user "su" to root (he will need the password), or use "sudo" as described above