topic Re: Create user with option can shutdown HP-UX only in Operating System - HP-UX

Create user with option can shutdown HP-UX only

mardimarijo — Fri, 03 Apr 2009 11:07:45 GMT

Hi, i'm new to administration of HP-UX. I wan to create a user who able to shutdown the HP-UX machine but this user not have ability same as root. Please advise me. Thanks.

Re: Create user with option can shutdown HP-UX only

Hakki Aydin Ucar — Fri, 03 Apr 2009 11:26:47 GMT

/etc/shutdown.allow

it is good for you. put user you want him/her to allow to do that.

Re: Create user with option can shutdown HP-UX only

V. Nyga — Fri, 03 Apr 2009 11:31:59 GMT

Hi,

yes insert '+ ' in /etc/shutdown.allow.
You have to add root too, then ('+ root')

Volkmar

Re: Create user with option can shutdown HP-UX only

mardimarijo — Fri, 03 Apr 2009 11:45:26 GMT

Thanks to Hakki and Volkmar. 1 more question, why must have to add root too, then ('+ root'). Can give me example how to do it.

Thanks again.

Re: Create user with option can shutdown HP-UX only

V. Nyga — Fri, 03 Apr 2009 12:00:17 GMT

Hi again,

well, for my ws with 11.11, that's my experience.
As soon as you add one non-root user to /etc/shutdown.allow you're no longer allowed to shutdown as root.
So just add a second line.
This is my /etc/shutdown.allow:
+ stop
+ root

Just two lines ...

HTH
Volkmar

Re: Create user with option can shutdown HP-UX only

mardimarijo — Fri, 03 Apr 2009 12:09:32 GMT

Hi Volkmar,

Thanks for your advise.
Refer to your advise :
This is my /etc/shutdown.allow:
+ stop
+ root

what it mean + stop? this stop is username? I refer to your replied before, insert '+ ' in /etc/shutdown.allow.

Mardi

Re: Create user with option can shutdown HP-UX only

V. Nyga — Fri, 03 Apr 2009 12:11:59 GMT

yes - 'stop' is my second user, who can shutdown the ws.

Sorry, was not clear enough from my side.
Volkmar

Re: Create user with option can shutdown HP-UX only

mardimarijo — Fri, 03 Apr 2009 12:16:46 GMT

Thanks Volkmar.

Why i wan my staff to be able to shutdown as I most of time have to go outstation and want them to be able shutdown the machine but at the same time restrict them to perform job as administrator.

I will inform you when I try on next Monday(April, 6th 2009).

Re: Create user with option can shutdown HP-UX only

V. Nyga — Fri, 03 Apr 2009 12:36:38 GMT

That was my intention, too. :-)

But I don't tell them the command, they just have to login as user 'stop'.
In his profile is the shutdown-command, so the ws is shutting down immediatelly.

Volkmar

Re: Create user with option can shutdown HP-UX only

mardimarijo — Mon, 06 Apr 2009 03:21:06 GMT

Hi Volkmar,

I already edited my shutdown.allow and add 2 line like below:

+ rose
+ root

and saved it. When i login using username rose and try to shutdown using this command:

shutdown -ry 0

this appear:

sh: shutdown: not found.

Can advise me.

Mardi

Re: Create user with option can shutdown HP-UX only

Dennis Handly — Mon, 06 Apr 2009 03:44:08 GMT

sh: shutdown: not found.

If rose isn't a root user, she needs to use absolute paths to shutdown:
/sbin/shutdown -ry 0

The man page mentions the path:
http://docs.hp.com/en/B2355-60130/shutdown.1M.html

Re: Create user with option can shutdown HP-UX only

mardimarijo — Mon, 06 Apr 2009 03:59:12 GMT

Thanks you Dennis.

I try like this:

Login as rose. then cd to /sbin then from that directory I can execute the shutdown -ry 0.

Is there a way i can modify so the user(in this example, rose) no need to change directory before execute the shutdwon command? Like what root can do.

Re: Create user with option can shutdown HP-UX only

Suraj K Sankari — Mon, 06 Apr 2009 04:04:47 GMT

HI,

>>Is there a way i can modify so the user(in this example, rose) no need to change directory before execute the shutdwon command? Like what root can do.

Just modify rose's .profile and add this line
PATH=$PATH:/sbin
export $PATH

Suraj

Re: Create user with option can shutdown HP-UX only

Dennis Handly — Mon, 06 Apr 2009 04:20:43 GMT

>Login as rose. then cd to /sbin then from that directory I can execute the shutdown -ry 0.

If your home directory isn't on the root volume, you'll have to cd anyway.

>Is there a way I can modify so the user no need to change directory before execute the shutdown command?

You can update PATH as Suraj said. But you shouldn't be using that command that often to really save that much over using the absolute path.

Re: Create user with option can shutdown HP-UX only

mardimarijo — Mon, 06 Apr 2009 04:26:35 GMT

Suraj and Dennis,

I think with add user in shutdown.allow is enough for the user to shutdown the after cd to /sbin.

I will try it at real server after office hour and let u all know tommorow.

Mardi

Re: Create user with option can shutdown HP-UX only

Suraj K Sankari — Mon, 06 Apr 2009 06:00:33 GMT

Hi,

Please assign some points who give there valuable time for your problem.

To know how to assign points please go through the below link.

http://forums13.itrc.hp.com/service/forums/helptips.do?#33

Suraj

Re: Create user with option can shutdown HP-UX only

expertone — Sat, 16 Mar 2013 05:42:15 GMT

Suppose two hosts mumbe1 and mumbe2... and now I want on that user "ASHISH" can shutdown the both the hosts.

So what will be the steps...

1 vi /etc/shutdown.allow

2 + ASHISH mumbe1 mumbe2

3 wq!

so is these steps are ok ... or if there are any changes please revert me back as soon as possible.

Re: Create user with option can shutdown HP-UX only

Dennis Handly — Sat, 16 Mar 2013 05:52:21 GMT

>Suppose two hosts mumbe1 and mumbe2

Then you need to have:

+ root

mumbe1 ASHISH

mumbe2 ASHISH

Note: This file must be present on both systems.

How to restrict FTP users

expertone — Sat, 16 Mar 2013 06:10:19 GMT

Can give you details about how to restrict certain FTP users .

Re: How to restrict FTP users

Dennis Handly — Sat, 16 Mar 2013 06:16:07 GMT

See the manpages for ftpaccess(4) and ftphosts(4).