topic Re: Giving a simple user administrativ privilages in Operating System - HP-UX

Giving a simple user administrativ privilages

Noa Harel_1 — Mon, 29 Jul 2002 11:12:20 GMT

Hi
I need help in something quiet simple (I Hope )
I want to give to simple user the privilege to copy hidden files (.profile and so on) to a home directory of other simple users, and change the ownership of the Home directory to the other user's username.

I'm working on un HPUX-11 system with 500 users.
The reason I need it - is that I???m planning to pass all user management to the organizational Help desk.

Thank you!

Re: Giving a simple user administrativ privilages

Sukant Naik — Mon, 29 Jul 2002 11:15:27 GMT

Hi,

Please use the utility sudo.

This allows you to define user groups, whom you can assign privileges.

-Sukant

Re: Giving a simple user administrativ privilages

Daimian Woznick — Mon, 29 Jul 2002 11:23:33 GMT

Along with sudo, you could also use Service Control Manager, SUID Shell Scripts (would not suggest it though), and Restricted SAM.

If you are looking at handing over all the user management to the Helpdesk you may also require a way to reset passwords and enable accounts.

You can find sudo here:

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

You can find Service Control Manager here:

http://www.software.hp.com/NSM_products_list.html

The best thing about Service Control Manager (other than being free) is that you can incorporate other system and network management tasks into it.

Re: Giving a simple user administrativ privilages

Geert Scholten — Mon, 29 Jul 2002 11:31:35 GMT

I think sukant means the utility su
su -

Give the administrator the grouprights the users also have
/etc/group

Re: Giving a simple user administrativ privilages

Nick Wickens — Mon, 29 Jul 2002 11:36:57 GMT

Actually considering that you want to pass all user management over to your helpdesk then sukant is correct in suggesting sudo as this will allow you to give the required root permissions to setup new users, delete users , grant new/forgotten passwords, reactivate passwords etc etc.

Install sudo from the binary listed above and then look at the man pages thus available for sudo and sudousers.

Re: Giving a simple user administrativ privilages

Carlo Henrico_1 — Mon, 29 Jul 2002 11:40:44 GMT

Noa

I have succesfully implemented restricted SAM for this as Domian suggests.

Create the user first, then using "sam -r" first remove any functions the user should not have then only add those they should have. This way you can make sure that all files etc are in place that the "simple user" would need to perform. ;)

Cheers

Carlo