Power broker access on hpux

[Shivkumar]

Dear Sirs,

Is there a way to configure power broker access so that only certain commands can be used by power broker privileged users ?

Thanks,
Shiv

[Sanjay_6]

Hi Shiv,

Yes you can. Refer to your powerbroker manual on how to do it. Or you can ask for assistance from symark support.

http://www.symark.com

Hope this helps.

regds

[Raj D. · Accepted solution]

Hi Shiv ,

1.Yes you can configure powerbroker to rstrict and manage access rights on yoru system , and as per need.

2. You can also go for sudo , its free product and many organizations uses it.


About Powerbroker:

Symark PowerBroker protects the superuser or root account (the most targeted user account), from hackers who could remove critical system files, gain access to confidential data and delete audit trails.

Secure Access to UNIX/Linux Administrative Privileges

Granular delegation of UNIX/Linux ROOT privileges
Secure application generic account privileges (e.g., oracle)
Restrict command line access to programs and applications
Control access to files and directories
Detailed UNIX/Linux Security Policies

Comprehensive access control policies using a "C-like" scripting language
Policy Scripting GUI to speed policy development
Enable access by user, UNIX/Linux group, netgroup, or host
Restrict or replace specific UNIX/Linux commands, including su and r-commands
Restrict access by day, date and time
Restrict access to and from specified hosts, including remote hosts.

You can check this link, for technical details:

ftp://powerdocs:P0werD0cs@ftp.symark.com/powerbroker/PB-README.txt

Cheers,
Raj.

[Raj D.]

Shiv,

You can also download sudo and install it, and controll accss rights.

sudo allows a system administrator to give certain users or groups of users the ability to run some (or all) commands as root or another user while logging the commands and arguments.

The current version is sudo 1.6.8p12, released on November 8, 2005.



Check this link:
http://www.courtesan.com/sudo/download.html

hth,
Raj.

[Raj D.]

Shiv , got this link from itrc search.

Hope it will help :
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=985256

good day,
Raj.

[Chandan Kumar_1]

Hi Shiv,

You may also go through the below web link:

http://linux.ittoolbox.com/topics/t.asp?t=311&p=320&h1=311&h2=320

http://www.symark.com/pr/2003/2003_02_12_symark_addresses_sans_fbi_top10.htm

http://www.pr9.net/comp/linux/2924november.html

All the best!
Chandan

[Bob Silverstein]

Dear Shivkumar,

Please contact Symark Software directly regarding your PowerBroker questions.

BTW - The link to a 2003 press release posted by Chandan Kumar is correct but the is corrupt. If you copy and paste the displayed URL into your browser it will work.

Happy Holidays!

Bob Silverstein
Technical Support

Symark Software
30401 Agoura Road, Suite 200
Agoura Hills, CA 91301
http://www.symark.com
PowerBroker support: pb-support@symark.com
PowerPassword support: pp-support@symark.com
PowerKeeper support: pk-support@symark.com
Product Support Hotline (staffed 24x7): 800-234-9072
M...