topic Account disable in Operating System - HP-UX

Account disable

Manuel_8 — Wed, 20 Nov 2002 14:48:23 GMT

Hello Guys,
I want excute /usr/lbin/modprpw command with user different from root.
For Example
I have an account disable on machine and I want rest its with /usr/lbin/modprpw -k root command, but I can use this command ONLY if I'm a superuser.
If somebody know another method to resolving this problem, please tell me.

Thanks

Re: Account disable

Bart_6 — Wed, 20 Nov 2002 14:47:34 GMT

try the setuid flag but be awre of the potential security risks.

Re: Account disable

Alex Glennie — Wed, 20 Nov 2002 14:49:30 GMT

see http://www.courtesan.com/sudo/

"Sudo (superuser do) allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root while logging all commands and arguments. Sudo operates on a per-command basis,"

Re: Account disable

harry d brown jr — Wed, 20 Nov 2002 14:49:36 GMT

If you don't have sudo, get it from here:

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

live free or die
harry

Re: Account disable

Kellogg Unix Team — Wed, 20 Nov 2002 14:51:45 GMT

If you have sudo installed on your server, you can selectively give this privelege to some users to execute these commands.

Rgds
...Manjeet

Re: Account disable

harry d brown jr — Wed, 20 Nov 2002 14:52:01 GMT

sudo ?

or

Make the script setuid to root

live free or die
harry

Re: Account disable

Wodisch — Wed, 20 Nov 2002 17:32:22 GMT

Hi,

add that command line to your SAM's options, then use "sam -r" to permit the plain user to have use ONLY that single option within SAM, and then tell him/her to use SAM...

FWIW,
Wodisch