Is root the only user to create users or change passwords of others

[yyghp]

Is it possible that I can have a user other than "root", which will be used by another guy, who can help me to manage users, such as create another users, change their password, etc... ?

Thanks !

[Patrick Wallek]

By default only root can do this.

You could set up sudo so that someone else could perform these functions.

You could also set up restricted sam and set up the other user to be able to do this.

To configure restricted sam invoke

# sam -r

[Joseph Loo · Accepted solution]

hi,

only user who can change password is root. unless u like to use sudo which is available:

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.8p7/

another way would be restricted sam (sam -r) which assign certain rights to user.

regards.

[Dmitry G. Spitsyn]

To be acurate, any user with UID=0 can do that, even if his username is not root, but wanted ;-)

BR,
Dmitry

[Etienne Roseau]

hi
only way is to give the user restricted root rights (with SAM > accounts and user)
HTH
E.

[Stf]

Hello

I think the best way is to create a user with UID=0, it gives the user the same rights as root...

Stf ;-)

[Cem Tugrul]

Hello,

i am also agree with creating user with uid=0
rights with root but the Q is how is it meaningful?...so sudo can be solution.

Good Luck,

[Rick Garland]

Any UID of 0 can do. But advise is no more than 1 UID=0, this being the root account.

You can setup some restricted SAM. Better yet, use sudo and you will be able to have better logging as to who did what and when and from where.

Can make a parsing script against the sudoi log file and lots of info can be made available.

[DCE]

Giving a user a UID of 0 is not a very good idea from a security perspective. That user will not only be able to manage id's, but they will have, by definition, full root authority on the system. The best way is the restricted SAM. It is extremely easy and fast to set up, and it restricts the root authority of the person managing the id's.
Dave

[Etienne Roseau]

give the root password to everybody will be easier...hope you have a recovery tape....