topic Re: Sudo configuration in Operating System - HP-UX

Sudo configuration

Miguel Carabano_1 — Mon, 19 Mar 2007 13:22:13 GMT

Hi team,

How to allow a SapBasis user to cancel print jobs with sudo ???.

I have installed sudo on 11.23 ia64.
sudo 1.6.8p12

Thanks

Re: Sudo configuration

Ivan Krastev — Mon, 19 Mar 2007 13:59:00 GMT

See this previous thread - http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=979234

regards,
ivan

Re: Sudo configuration

David Bellamy — Mon, 19 Mar 2007 14:03:35 GMT

Hello Miguel
use the visudo command and look at the configuration file. it will give you a pretty good idea on how to set it up

Re: Sudo configuration

Pupil_1 — Mon, 19 Mar 2007 14:46:10 GMT

visudo will edit the /etc/sudoers file for you. The important ones are the User_Alias (to specify user who can execute), Cmnd_Alias (to specify the commands the are allowed to be executed) and privilege area where the specification is completed.

an example sudoers file is given for reference.

# Host alias specification (You can ignore this if you don't have a centralised SUDO configuration)

# User alias specification
User_Alias DBA = user1, user2, user3
User_Alias SAP = user4, user5

# Cmnd alias specification
Cmnd_Alias SU_ORACLE = /usr/bin/su - oracle

Cmnd_Alias CDROM = /usr/sbin/mount /dev/dsk/cdrom /cdrom, \
/usr/sbin/umount /cdrom

# Defaults specification
# User privilege specification
root ALL=(ALL) ALL
DBA ALL = NOPASSWD: SU_ORACLE, CDROM
#Users in DBA User Alias are allowed the commnds listed in Command Alias