How to create restricted user in HP-UX?

[Sudhaadm]

Hi all
Thanks in advance.
i want to know that,i have to create user and give few commands to excecute like user creation etc..
TX

[Senthil Kumar .A_1 · Accepted solution]

Hi Sudhaadm,


You can use restricted sam. Just create a normal user. From root run the command "sam -r" and delegate only those functional areas to the new user, which you want him to perform like ,user creation etc..

As such if you want to acheive this through command prompt instead of delegation through "SAM"...I had say "sudo" package is the best bet. I thing in recent HPUX releases, sudo is packed in the application cd (not too sure).. or you need to download and install the sudo onto your HPUX box.

Regards,
Senthil

[Sudhaadm]

Hi Senthul,
Thanks for the update.
How can i download the package?
How can i check wether the package is installed or not?
Thanks

[Sudhaadm]

Hi Senthul,
Thanks for the update.
How can i download the package and provide the package details.?
How can i check wether the package is installed or not?
Thanks

[Arunvijai_4]

Hi,

Sudo is part of Internet express which can be downloaded from,

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

-Arun

[Sudhaadm]

Hi all,
The software is available on my system as given below and the version?
If it is loaded,How can i create the user id's?
Is there any procedure,Please reply.
==================================
Swlist -l product O/P
sudo 1.6.2b1 sudo

Uname -a O/P
HP-UX n02 B.11.11 U 9000/800 627319313 unlimited-user license

[Senthil Kumar .A_1]

Hi,

Its not about creating a restricted ID, with sudo you can give permissions for the normal user to use commands like "useradd" etc...

For this u need to define a rule in /etc/sudoers file..

please refer this link...

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1003784

By the way ..aren't u interested in "sam -r" option..

Regards,
Senthil

[Senthil Kumar .A_1]

I mean, sam -r option is easier to implement for your requirement.

regards,
Senthil

[Sudhaadm]

Hi ALL
THanks for the great support.

[Juergen Feldmann]

I have experienced that the restricted SAM is the easiest way. With sam -r (as root) you define customer menus for a user. Very easy to do. After that run sam -f just to check if it works.

Our User Help Desk is using SAM very often in that way without having root permission.

In my point of view it's easier and better than sudo.

regards
Juergen