Operating System - HP-UX
1752809 Members
5995 Online
108789 Solutions
New Discussion юеВ

Reg : user with root privileges

 
SOLVED
Go to solution
Mastan
Frequent Advisor

Reg : user with root privileges

Hi,

For audit purpose i need to create a user with root privileges.

Please let me know how can i complete this activity!

OS version: HP-UX B.11.23 U ia64 unlimited-user license server.

Regards,
Mastan.
6 REPLIES 6
Johnson Punniyalingam
Honored Contributor

Re: Reg : user with root privileges

Install -SUDO
Problems are common to all, but attitude makes the difference
EmmanuelK2
Advisor
Solution

Re: Reg : user with root privileges

Hello Mastan,
The simplest way is to create a user with duplicate ID=0. This is however not advised because it posses security concerns.

"useradd -u 0 -g 1 -d /home/root2 -s /bin/sh -c "duplicate root A/C" root2"

Installing SUDO is a great option. Refer to the official site at:
http://www.gratisoft.us/sudo/intro.html

Equally, the HP-UX Role-Based Access Control (RBAC) Feature is a good alternative. More detail about RBAC can be got at:
Overview:
https://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=AccessControl

Installation:
https://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=AccessControl

Other Manuals:
http://h20000.www2.hp.com/bizsupport/TechSupport/DocumentIndex.jsp?lang=en&cc=us&taskId=101&prodClassId=10008&contentType=SupportManual&docIndexId=64255&prodTypeId=18964&prodSeriesId=4164662

Regards,
Emmanuel
Mastan
Frequent Advisor

Re: Reg : user with root privileges

Dear Emmanuel,

Thank you very much for your reply.

Regards,
Mastan.
Dennis Handly
Acclaimed Contributor

Re: Reg : user with root privileges

madhuchakkaravarthy
Trusted Contributor

Re: Reg : user with root privileges

hi mastan

better install sudo and not to create userid with duplicate id.

check for swlist |grep -i sudo

regards

MC
Ismail Azad
Esteemed Contributor

Re: Reg : user with root privileges

Hi mastan,

Adding to emmanuel's post , you will have to add an -o option as well for the duplicate UID.However, HP does not reccommend it at all. The standard approach would be RBAC. However, configuration is not simple as you will have to know the linking of the various files. Depends on the effort you want to put to the task and the effectiveness.

Regards
Read, read and read... Then read again until you read "between the lines".....