topic Re: Create permisson to normal users to reboot machine in Operating System - HP-UX

Create permisson to normal users to reboot machine

Joyce S. Solomon_1 — Fri, 19 Oct 2001 03:10:54 GMT

Hi All,

Please help.
How do i set an option to a normal user say A in group users to be able to for shutdown and reboot a hp-ux workstation.
I need to give him/her only this access besides all permission given when they are grouped as a normal user.

Thanks

Regards
Joyce

Re: Create permisson to normal users to reboot machine

T G Manikandan — Fri, 19 Oct 2001 03:17:55 GMT

Hello,
If you are trying to provide root permissions to normal users,the tool sudo can be used.
http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.2b1/
Try downloading the tool.
You have various questions reg sudo in the forums site.Just give a search for sudo.

Thanks
G Manikandan

Re: Create permisson to normal users to reboot machine

Patrick Wallek — Fri, 19 Oct 2001 04:19:57 GMT

Check out the /etc/shutdown.allow file. You can specify the user allowed to shutdown the system in this file.

Re: Create permisson to normal users to reboot machine

Stefan Schulz — Fri, 19 Oct 2001 06:27:07 GMT

Hi,

just put the user in the file /etc/shutdown.allow in the form:

user hostname

Make sure you also put the user root in this file. If shutdown.allow exists then automatically all users not mentioned are not allowed to shutdown the system. This means also root.

Hope this helps

Regards Stefan

Re: Create permisson to normal users to reboot machine

Michael Tully — Fri, 19 Oct 2001 06:47:25 GMT

Hi,

There are basically two ways that you can
allow users to shutdown a server. You can
include their user id in the shutdown.allow
file, or set up 'sudo' to do it. You can
also set up 'sudo' to other things as well.

HTH
-Michael

Re: Create permisson to normal users to reboot machine

Bill McNAMARA_1 — Fri, 19 Oct 2001 07:39:21 GMT

As the guys said, shutdown.allow will do what you want, but you could also give them a little more access to root tasks with one of two tools:

sam -r
(restricted sam, create the profile for the user.)

scm
service control manager, distributed system administration. See http://www.hp.com/go/servicecontrol
Free downld, available/intagratable linux.

Later,
Bill

Re: Create permisson to normal users to reboot machine

Joseph Chakkery — Fri, 19 Oct 2001 09:29:36 GMT

Hi Solomon,

I will agree with what Bill suggests.

sam -r is a good option give only shotdown access to the user.Adding exec /usr/sbin/sam as the last line of users .profile will make sure the user can do only the shutdown procedure.

Regards
Joe.

Re: Create permisson to normal users to reboot machine

Joyce S. Solomon_1 — Wed, 24 Oct 2001 08:26:09 GMT

Hi all,

i have put in the information below to the shutdown.allow file at /etc

*******
optivity root
optivity ops

********

where optivity is the hostname
but i received this message when i type shutdown at command line

Must be super-user to shutdown system into state S -- exiting shutdown.

Please help

regards
Joyce

Re: Create permisson to normal users to reboot machine

Santosh Nair_1 — Wed, 24 Oct 2001 08:38:15 GMT

Are you trying to reboot the machine or take the machine to Single user. if the later, then it will not work. From the shutdown(1m) man page:

This file does not affect authorization to bring the system down to single-user state for maintenance purposes; that operation is permitted only when invoked by a superuser.

If you need to transition to a different run-level as a normal user, you would probably have to use something like sudo.

Hope this helps.

-Santosh