password resets

[Randolph Knippel]

What's the easiest way to enable a group of non-root users (like the Help Desk) to reset anyone's password - except maybe root's? We are at HP-UX 11.23.
Randy

[David Bellamy]

set them up as restricted sam users

[Randolph Knippel]

How about if I just want them to execute a password script that establishes certain attributes for the new password? (like force the user to change his password again at next login and establish password aging)

Randy

[Paul Sperry]

super or sudo.

I use super for all root/helpdesk tasks.

I also use xenmenu for the helpdesk login.
This brings up a menu driven interface that has all the tasks I wnat the helpdesk to do.
All rnn via super.

It's sweet it's simple.

[Bill Hassell · Accepted solution]

The best way is to download sudo from HP and configure a set of users to allow them to run the passwd command. Get a copy from:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

This program allows the named users to run specific program(s) and even restrict the parameters they are allowed to use.

[KapilRaj]

I would write a shell script and use sudo to do the work.

Regards,

Kaps

[Randolph Knippel]

sudo looks like the way to go.