topic Re: How to successfully su another user and run his scripts in Operating System - HP-UX

How to successfully su another user and run his scripts

yalin zhao — Fri, 08 Nov 2002 19:20:37 GMT

Hi friends,

I want to write a simple script with following purpose:

I want User A su User B
User A will run a script in User B's directory.

$ ll test
-rwxrwxrwx 1 ssprod sybase 86 Nov 8 14:07 test

This is what I wrote in a file "test"

"su - UserB -c /UserB/octacom/sqllist.sh
When I run it, nother happens. But If I run manually by su UserB and run it in UserB's diectory, it will work.
Can anyone give me suggestions?

Thanks

Yalin

Re: How to successfully su another user and run his scripts

Christopher McCray_1 — Fri, 08 Nov 2002 19:19:35 GMT

Hello,

Try this instead:

su - UserB -c "/UserB/octacom/sqllist.sh
Hope this helps

Chris

Re: How to successfully su another user and run his scripts

Jeff Schussele — Fri, 08 Nov 2002 19:20:51 GMT

Hi,

The quotes need to surround the -c command string - not the entire command.

Rgds,
Jeff

Re: How to successfully su another user and run his scripts

Pete Randall — Fri, 08 Nov 2002 19:26:07 GMT

Why not just change the permissions on the script?

Pete

Re: How to successfully su another user and run his scripts

yalin zhao — Fri, 08 Nov 2002 19:41:48 GMT

I changed it to the following:

su - UserB -c "/UserB/octacom/sqqlist.sh" su - UserB -c "/UserB/octacom/sqqlist.sh
none of them works

Note: I changed the permission of the scripts
to 777.
the "Any suggestions or any other way that we can do this?

Re: How to successfully su another user and run his scripts

Ken Hubnik_2 — Fri, 08 Nov 2002 19:45:50 GMT

su - userid. The - set the environment for that user. runs .profile

Re: How to successfully su another user and run his scripts

Pete Randall — Fri, 08 Nov 2002 19:46:30 GMT

If the permissions are 777, then why do you need to su to User B? User A can run the script as himself.

Pete

Re: How to successfully su another user and run his scripts

Martin Johnson — Fri, 08 Nov 2002 19:47:39 GMT

AFAIK, the password must be entered interactively. I tried this a couple of months back and was not able to get it to work. My work around was to submit an "at" job instead.

HTH
Marty

Re: How to successfully su another user and run his scripts

Christopher McCray_1 — Fri, 08 Nov 2002 19:54:41 GMT

Another thing,

Are you calling this pwd file by it's absolute path or are you just calling the file name?

You either have to do this:

su - UserB -c "/UserB/octacom/sqllist.sh
or

PWD=/full/path/to/pwd
.
.
.
su - UserB -c "/UserB/octacom/sqllist.sh <$PWD"

Hope this helps

Chris

Re: How to successfully su another user and run his scripts

Jeff Schussele — Fri, 08 Nov 2002 19:55:29 GMT

You're not going to be able to pass the password to the su command that way. I suggest you take Pete's advice & set the perms such that UserA can run the script.

Your other option would be for UserB to setup a .rhosts file that gives UserA equivalency rights to UserB.

Rgds,
Jeff

Re: How to successfully su another user and run his scripts

A. Clay Stephenson — Fri, 08 Nov 2002 19:57:20 GMT

You have a more fundamental problem. The su - rather than simply su is killing you. You want to source the user's .profile but almost certainly .profile expects an interactive (i.e. a terminal for stdin). Commands like stty, tset, and tabs will hang if stdin is not a tty device.

There are two ways to make this work:
1) surround any of the commands which deal with the terminal with
if [ -t 0 ]
then
tset ....
stty ....
tabs ...
fi

-t 0 is true if stdin (0) is a terminal device.

2) better
have a file that both .profile and your script sources (e.g) . /usr/local/bin/myenv.sh

myenv.sh would then set and export any needed vars.

There should be no exits or returns in this file.

Re: How to successfully su another user and run his scripts

A. Clay Stephenson — Fri, 08 Nov 2002 20:00:56 GMT

I just saw where you want a non-root user to be able to do this. NO way - it would be an unbelieable security hole if possible. What you can do is setup a sudo command. You can get sudo from:
http://gatekeep.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

Re: How to successfully su another user and run his scripts

Gerhard Roets — Mon, 11 Nov 2002 17:21:51 GMT

I use that su method on bootup in my rc scripts. I have a special Daemon user. Who runs network daemons i.e the cognos license manager. I do not want to run them as root, and the way described above is the way I do it with the only exception being that i nohup it.

/bin/nohup /bin/su - phlmgrd -c '/opt/cognos/license1/lmgrd /opt/cognos/license1/lmgrd.log2> /opt/cognos/license1/lmgrd.err & '

Regards
Gerhard