passwd without root permission

[Dee_3]

Can I somehow grant access to a person to change anyone's passwd without giving them open root access?

[Sachin Patel]

Hi Dee,
You can use program super. I think it is third party sofroware.
Then you can assign
passwd "/usr/bin/passwd" info="Change password" sachin, dee etc......
in /opt/super/lib/super.tab

So now user sachin and dee can run passwd with user id=0 i.e as root.

Sachin

[A. Clay Stephenson · Accepted solution]

Hi Dee,

You are a brave soul. You could use sudo to do this but the obvious danger is that this person could then change root's passwd and become root. For that reason, I would be much more tempted to write a setuid c program which could trap for uid's < 101 and not act on them.


Obviously, sudo could call a script to do the same checking but I would never put something like this in a script.


Regards, Clay

[Joseph Chakkery]

Hello Dee,

I think U can use restricted sam to achieve ur requirement.
Using root login go to sam using
#sam -r optiion Then enable user menu to particular user who wants to do passwd change or creation of user etc.
This user won't be able to change the passwd of super user (ie root)

I hope this will help u.

Regards
Joe.

[Ravi_8]

Hi,
this can be done using sudo.

later
ravi

[Joseph C. Denman]

you could use sam -r to give a user restricted sam privs.

...jcd...

[Deshpande Prashant]

HI
Restricetd sam access to user will help the users to change any one's password.
If you want to restrict the user to change only specific users/groups password, you can create a custom application in SAM. Write a script to check the requested user id is allowed id (eg. not root) then change password.
This script can be called from the custom application of SAM and run as root.

User sam -r to acccess/create the restricted SAM for user.

Thanks.
Prashant Deshpande.

[Dee_3]

Thanks to all for the information - I will give them a try!...deec