topic Re: SU command in non interactive mode in Operating System - HP-UX

SU command in non interactive mode

Guy_34 — Mon, 22 Mar 2004 20:43:41 GMT

Can i run the SU command in a non interactive mode. What i want to do is to pass the username and the password as commandline or batch parameters. Please let me if its possible and how to pass them. A sample file will be appreciated.

Thanks,

Re: SU command in non interactive mode

A. Clay Stephenson — Mon, 22 Mar 2004 21:15:33 GMT

No and this would be a huge security risk if you could. Only when you are running as root will su not prompt for a password. A good way to do this is via the sudo command. A less good way would be to create a setuid c program that exec's your script.

You can get sudo here:
http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.7p5/

Re: SU command in non interactive mode

Michael Tully — Mon, 22 Mar 2004 21:39:22 GMT

You could also wrap this up in an expect script. See the attached example of providing a password without user interaction.

Re: SU command in non interactive mode

Michael Tully — Mon, 22 Mar 2004 22:16:50 GMT

What I should have also mentioned is that there is a security risk associated with this, as rightly pointed out already by Clay.

Re: SU command in non interactive mode

Mauro Gatti — Tue, 23 Mar 2004 07:32:42 GMT

You can evaluate to use "ssh -l username host command" being sure to exchange before and register public user key in authorized_keys file.

RGDS

Mauro

Re: SU command in non interactive mode

Victor Fridyev — Tue, 23 Mar 2004 09:22:09 GMT

Hi,

The following workaround is also possible:
Instead of running su command you can run remsh. In this case you permit to user1 from computer srvrn (own hostname) to login as user2 without an authentication, i.e. in ~user2/.rhosts you add
srvrn user1.

in this case you run as user1 on srvrn
remsh srvrn -l user2 needed_script