how to authorized non-root user to executed some programs??

[Bernard Chan]

Hi,
Currently i'm running on HP-UX11.0, i would like to know how can i authorize other user to run certain scripts files or program?? Now the other user account are not authorized to do a single things..so how am i goin to solve the problem??

[Rajeev Shukla]

Hi,
Sudo is better but if want to customize those scripts for some users only best would be to write a c program with the setuid and run those programs.
I have some programs posted before.

Rajeev

[Alex Glennie]

see http://www.courtesan.com/sudo/

for downloads & documentation ...

[Elif Gius]

Hi

Try like suggested the sudo programm. We use it too and it wirks fine.
Also you can use the s-Bit for giving some users the rigth to execute dedicated binaries.

[John Meissner]

my recommendation is a free HP program called ServiceControl Manager. (SCM for short). I currently use this program with our company to allow the tier 1 and tier 2 support teams to issue commands as root (without giving them the root password). They can they run anything from a 'bdf' to using 'sam'.

[Tor-Arne Nostdal]

You can also create a script where the necessary commands can be performed.

Then add the script to /etc/shells

Make this as the login shell for a particulare user.

Then give privilegies by adding the user to root group and set this as default GID.
----------
NB!
You must ensure that the script cant be trapped and thus let the user break out and into a ordinary shell.

Avoid using commands like more or vi or others that have built in functionality which allow users to start subshells

[Rory R Hammond]

Another approach is to make special groups and set group permissions.

[David Bell_1]

You can also use the restricted sam shell. Create the program/script functions as part of SAM and only allow the users to see what you want them to see. Boot them directly to the restricted SAM shell. See man on sam -R.

HTH,

Dave

[Chris Wong]

Hi,

The advice you've received has been summarized in 2 articles I have:

http://newfdawg.com/SHP-Articles.htm

Distributing root privileges Part 1 and 2. You can use these methods for distributing the privileges of any user to another.

There are also 3rd party purchaseable products, such as PowerBroker from Symark.

- Chris