How to set more power to a user?

[jolight]

Hi All,
I need an option to set more power to a user id for administration purpose. Making the uid 0 can solve my problem, but I dont want to do because of auditing issues. Is powerbroker is a better way and let me know any opensource product can help me.

Thanks in advance

George

[Avinash20]

You could use sudo

[Avinash20]

http://www.gratisoft.us/sudo/intro.html

[Pete Randall]

The best solution is probably sudo but you may be able to utilize the restricted SAM feature (sam -r) to set the user up to use particular SAM functions to accomplish your/their needs.


Pete

[OldSchool]

"Making the uid 0 can solve my problem, but I dont want to do because...."

Good, because there are more than just "auditing" issues, this is an easy way to trash your system accidentally.

My preferences (in order) would be:

1) Check if "restricted SAM" (previously noted) will work for what you need
2) Download install "sudo" (also noted previously)
3) RBAC software (HP??)
4) PowerBroker...

PowerBroker will allow you to delegate things at a very granular level, but it can be a pain to configure. Its also relatively expensive and has a variety of features you may not need (keystroke logging, versions of vi and emacs that can't do shell escapes and so forth

[Dennis Handly]

>OldSchool: 3) RBAC software (HP??)

Yes: http://docs.hp.com/en/5991-4853/index.html

[Emil Velez]

SUDO can be downloaded free from software.hp.com

it is precompiled for HPUX.

WOrks file 1 config file and it can be used across systems.

[jolight]

Hi All,

I have implemented SUDO and its working fine.
Thanks to all for support.

George