topic su - switch user - NON-root in Operating System - HP-UX

su - switch user - NON-root

OFC_EDM — Sat, 15 Apr 2006 22:35:44 GMT

As you all know if you're logged into an HP-UX server as "root" when you switch user (su) to another account you can do so - without being prompted for a password.

I'd like to setup this same behaviour for 2 regular user accounts.

Preferrably without having to install sudo.

Any ideas on how to accomplish this?

Re: su - switch user - NON-root

Steven E. Protter — Sun, 16 Apr 2006 03:01:05 GMT

Kevin,

You are asking for an account to have a special prviledge only granted to root, without being root.

You are essentially granting root access to these accounts. Its an enormous security hole, but if you assign the numeric account id to zero, same as root, these accounts will have the same power.

They will also have all the other powers of root and I recommend you not do this.

You may be able to manipulate the pam.d configuration files to create the same behavior.

This is risky and root user and root cron should be used for these operations.

SEP

Re: su - switch user - NON-root

Sยภเl Kย๓คг — Sun, 16 Apr 2006 05:06:24 GMT

Hi,

1.Create a new group and assign those two users in the new group.
2.Edit /etc/default/security file and make SU_ROOT_GROUP as the new group.
3.Customise the pam authentication, so that the password is not prompted for those two users when they issue 'su'

Regards,
Sunil