su - switch user - NON-root

[OFC_EDM]

As you all know if you're logged into an HP-UX server as "root" when you switch user (su) to another account you can do so - without being prompted for a password.

I'd like to setup this same behaviour for 2 regular user accounts.

Preferrably without having to install sudo.

Any ideas on how to accomplish this?

[Steven E. Protter]

Kevin,

You are asking for an account to have a special prviledge only granted to root, without being root.

You are essentially granting root access to these accounts. Its an enormous security hole, but if you assign the numeric account id to zero, same as root, these accounts will have the same power.

They will also have all the other powers of root and I recommend you not do this.

You may be able to manipulate the pam.d configuration files to create the same behavior.

This is risky and root user and root cron should be used for these operations.

SEP

[Sยภเl Kย๓คг · Accepted solution]

Hi,

1.Create a new group and assign those two users in the new group.
2.Edit /etc/default/security file and make SU_ROOT_GROUP as the new group.
3.Customise the pam authentication, so that the password is not prompted for those two users when they issue 'su'

Regards,
Sunil