diff between non root users and root users

[madhudeepan]

bdf ,, glance , top commands are executed by both root and non root users , but some administrative commands are not able to run by non root users..


i need to give permission for the non root users to execute printers related command alone and for other administrative commands non root user should not have permission ,,
how can i do it..

this is for my knowledge base

[Tingli]

You can use sudo to do it. For more info, you can check man sudo, man sudoers, man visudo.

[Pete Randall]

Or give them access to restricted SAM (sam -r).


Pete

[Hakki Aydin Ucar]

I would prefer to use restricted SAM (sam -r).
Also , role-based access control (RBAC) can be useful.

[Emil Velez]

sam -r is gone at 11.31 so

Role based access control is probably the best solution

look up roleadm

[Yogesh M Puranik]

Hakki and Emil,

R u sure role-based access control (RBAC) is part of HP-UX?I hope this utility is used in Solaris.

Madhudeepan,

Regarding Giving access to perticular commands you can either use SAM -r, but i would prefer,sudo utility only.Because logs are not generated with SAM as this is TUI (Terminal User Interface).

In sudo utility,the commands whichever run by root privillaged user can be tracked.


Rgds
Yogesh

[Dennis Handly]

>Yogesh: Are you sure role-based access control (RBAC) is part of HP-UX?

Very sure, for free:
http://docs.hp.com/en/5991-4853/index.html
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=SecurityExt
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=AccessControl

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1215907
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1206541
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1204720