giving user administrator priviledges without changing UID

[Mark Vollmers]

Hi, all. I think I might know how to do this, but I'd rather be sure than screw up.

I have a user that I want to give administrator right to so that they can access most files and run programs like SAM, shutdown and frecover without having to su to root. I know that I can change the UID to root, but I would prefer not to do this due to concerns that I have seen about having multiple users with the root ID. Do I just add the user to every group, or is there some other command that will give access rights? How does this work for utilities like SAM or commands? any help would be greatly appreciated. Thanks.

Mark

[Bill McNAMARA_1 · Accepted solution]

You might want to have a look at Service Control Manager although its a whopping 150MB download.

Do a search from software.hp.com

Later,
Bill

[Vincenzo Restuccia]

Compile a script C with /usr/sbin/sam,chmod 4501.

[Joseph C. Denman]

I read something about this in another thread. I believe there is some software out there that will allow this. I think it is called SUDO.

...jcd...

[MARTINACHE]

Hi,

Have a look at sudo ( http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.2b1/ )

With this tool, a "normal user" can use command as root.

Very useful

Regards,

Patrice.

[Patrick Wallek]

SUDO is a great tool to use to do this. It is very customizable and will do exactly what you want.

To grant SAM access to other non-root users, you can also use restricted sam ('sam -r' to set it up) to grant access to certain areas of sam to certain users.

[melvyn burnard]

you may also want to take a look at the Restricted SAM Builder, use sam -r
This allows you to give access to a user to run a restricted set of SAM utilities.
To allow the user to shutdown the box, you could simply create the /etc/shutdown.allow file, but remember to include root in there otherise root is not allowed to shutdown the system :-}