topic Re: SU restriction using PAM in Operating System - HP-UX

SU restriction using PAM

Selvakumar_4 — Wed, 08 Mar 2006 15:38:14 GMT

Hi,

Just I would like to do su restriction to oracle user same like su to root.

How can we configure this in /etc/pam.conf.

Thanks,
Selva

Re: SU restriction using PAM

Marcel Boogert_1 — Wed, 08 Mar 2006 15:45:48 GMT

Selva,

Try this link:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=907911

Regards, MB.

Re: SU restriction using PAM

Selvakumar_4 — Fri, 10 Mar 2006 08:51:24 GMT

MB,

Thanks for your response.
I don't have /etc/pam.d in my HP system.
I have only 2 files in /etc

1. pam.conf
2. pam_user.conf

Thanks,
Selva

Re: SU restriction using PAM

Ivan Ferreira — Fri, 10 Mar 2006 12:46:20 GMT

I believe that what you want cannot be done with pam. But you can use sudo, and enable a specific list of users use su - oracle:

# visudo

User_Alias ORACLESU = user1, user2, user3

ORACLESU ALL = /usr/bin/su - oracle

Re: SU restriction using PAM

Selvakumar_4 — Fri, 10 Mar 2006 13:06:28 GMT

Ivan,

Thanks. In our environment we are not encouraging SUDO. Do I need latest PAM to achieve this. Because we could do in Linux.

Pls advice.

Thanks,
Selva